redline | 4584-135-0x0000000000500000-0x0000000000659000-memory[.]dmp

Sharing

Copy URL Twitter E-mail

General

Target

4584-135-0x0000000000500000-0x0000000000659000-memory.dmp
Size

1.3MB
MD5

e6becd05e710248c533398637aabe2d5
SHA1

14d4d4b900a7a38855fff428ffe1283ea6c7cc70
SHA256

18f85ea3ee64eb8aba59a8eba8e30a620e487e188b3b191d0b048dd9f5753575
SHA512

7d33ed5c95f08a4e166fc2c843f70a628025ab6440dc7271dfb7e9e3263519e05e48969e76bf954d8385eb93ac7ab95260724d26bc6475f62005080149cd0df0
SSDEEP

12288:Rzr6WWDi7AG7FawBG9YZruSPR8CLyDiaLqcywVbhb3:R3FawBlh8CLlwVbd

Score

10^/10

redline

Malware Config

Signatures

Redline family
redline

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4584-135-0x0000000000500000-0x0000000000659000-memory.dmp

Files

4584-135-0x0000000000500000-0x0000000000659000-memory.dmp
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 191KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 426KB - Virtual size: 426KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.D11
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zdat
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.Zochn1
Size: 396KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.textbss Size: - Virtual size: 191KB

.text Size: 426KB - Virtual size: 426KB

.D11 Size: 28KB - Virtual size: 27KB

.rdata Size: 64KB - Virtual size: 64KB

.data Size: 8KB - Virtual size: 14KB

.idata Size: 5KB - Virtual size: 4KB

.zdat Size: 210KB - Virtual size: 209KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 270B

.reloc Size: 15KB - Virtual size: 15KB

.Zochn1 Size: 396KB - Virtual size: 396KB

.textbss
Size: - Virtual size: 191KB

.text
Size: 426KB - Virtual size: 426KB

.D11
Size: 28KB - Virtual size: 27KB

.rdata
Size: 64KB - Virtual size: 64KB

.data
Size: 8KB - Virtual size: 14KB

.idata
Size: 5KB - Virtual size: 4KB

.zdat
Size: 210KB - Virtual size: 209KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 270B

.reloc
Size: 15KB - Virtual size: 15KB

.Zochn1
Size: 396KB - Virtual size: 396KB