redline | 2384-26-0x0000000000400000-0x00000000005CE000-memory[.]dmp | Triage

Sharing

General

Target

2384-26-0x0000000000400000-0x00000000005CE000-memory.dmp
Size

1.8MB
MD5

72609928fc4607165ec588a3d05bff7d
SHA1

13a11b995c349cd3f0bc3319087004696392c0c9
SHA256

205c9e8deff1591c9d703ca5bd73d2b9a1c484db6176263a126f8de9bd3a2ab7
SHA512

385e64eb70b1c9760f8d187be83c79c075ecc0667460f7a38c94f0548517b8297a1d30a11f287504dec6cbcb3f7381183d28a6d7c5de27fc5cb287d7683583f3
SSDEEP

24576:vKTMsbYHrTuMdFpLz303iqgAREVSedmuWfPMWFFnrg5u1NkG98cTpWoVXqN09gTb:Zsb2ZRLDthSHfc5uq2WoVXqCEiG

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2384-26-0x0000000000400000-0x00000000005CE000-memory.dmp

Files

2384-26-0x0000000000400000-0x00000000005CE000-memory.dmp
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 161KB - Virtual size: 160KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cSs
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ