redline | 1484-648-0x0000000001100000-0x0000000001259000-memory[.]dmp

Sharing

Copy URL Twitter E-mail

General

Target

1484-648-0x0000000001100000-0x0000000001259000-memory.dmp
Size

1.3MB
MD5

78cf11f9d4fca12b8579ff4fcd26ebbf
SHA1

70b0ed664d626395d9dbdf9d8b49721e643ae184
SHA256

03140df37b6d4b86f75b6e541ea91eb6414c546ab5d3d75b10954c141dff09d4
SHA512

ee357fb85cc9d22e1efcea0d86e38ccbb7a78cf85f6cb7e93fbe3916c837f6459c64d4063fbd90e7bba52a19440eba246e542062e82bd9ea4c842f650a54660a
SSDEEP

12288:dZ751YX9VnZu4FaIg8VeETuRoDG0S8CLyDiaLqcywVbBb3:d4FaIgUT9S8CLlwVb9

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1484-648-0x0000000001100000-0x0000000001259000-memory.dmp

Files

1484-648-0x0000000001100000-0x0000000001259000-memory.dmp
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.D11
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdat
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Zochn1
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 191KB

.text Size: 426KB - Virtual size: 426KB

.D11 Size: 28KB - Virtual size: 27KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 8KB - Virtual size: 14KB

.idata Size: 5KB - Virtual size: 4KB

.zdat Size: 210KB - Virtual size: 209KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 270B

.reloc Size: 15KB - Virtual size: 15KB

.Zochn1 Size: 396KB - Virtual size: 396KB

.textbss
Size: - Virtual size: 191KB

.text
Size: 426KB - Virtual size: 426KB

.D11
Size: 28KB - Virtual size: 27KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 8KB - Virtual size: 14KB

.idata
Size: 5KB - Virtual size: 4KB

.zdat
Size: 210KB - Virtual size: 209KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 270B

.reloc
Size: 15KB - Virtual size: 15KB

.Zochn1
Size: 396KB - Virtual size: 396KB