RedbullKSA[.]Repositories[.]dll | Triage

Sharing

General

Target

RedbullKSA.Repositories.dll
Size

438KB
MD5

63e6fdac198bc3d3773a00291563f461
SHA1

e97c0997937d76634d72a98482b7fc17e1d33cdf
SHA256

2557cfc5ae0313981edb3ac842a54a59f70fcdad941763068dbb86edfef713ce
SHA512

fcc8a9b5083bdf966581c47d76dd811e9e56475f0114c68edd46e9187eecab3c5871f8527141565f82056f560cc61bda425dfc2725a91ae3b253215de7511c50
SSDEEP

6144:juzzD/Vy1RTGih1tn9AQswRNrjRmhP1w2XMNYSMCDEUNB0DLHaMjja4dLMJy:6/jVy1RTF9ALLdwgMNOXu4iJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RedbullKSA.Repositories.dll

Files

RedbullKSA.Repositories.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/opt/atlassian/pipelines/agent/build/RedbullKSA.API/RedbullKSA.Repositories/obj/Release/net5.0/RedbullKSA.Repositories.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 436KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ