redline | 2076-162-0x00000000011F0000-0x000000000130B000-memory[.]dmp | Triage

Sharing

General

Target

2076-162-0x00000000011F0000-0x000000000130B000-memory.dmp
Size

1.1MB
MD5

0ac126f3e50af31faf9f397c361f71e7
SHA1

00fad5112f37bfc4f1fedd39f31a678042fb3123
SHA256

de671a595f348d4b0c9b860ec64ea11fbd0ff0d40a351495de80ec3a44547e41
SHA512

acb3ebbf2914c4f3f617d221ebeb4016c056572196ddd206bf95b3cf9a4b7bae44029b041ee8434ce63917d7a5dc592c03c8dfcea67f2e7dfdd83de2a94f6be2
SSDEEP

24576:hZ7Bu909sNwLpigLCtevWXukm2xuoBzbNgcZwDybOsMSq:hZNsNwLpfLrw1QihH

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2076-162-0x00000000011F0000-0x000000000130B000-memory.dmp

Files

2076-162-0x00000000011F0000-0x000000000130B000-memory.dmp
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 674KB - Virtual size: 674KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PUMP
Size: 269KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ