RedbullKSA[.]Common[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RedbullKSA.Common.dll
Size

153KB
MD5

c38077fff7f538ba22abda46d87e3e29
SHA1

2fb2a72dcb0d60b5797690a18cceba6ff89ab2b8
SHA256

9585329ef47518bf3e8fde594524fad26c6fb92626e629a09015ee33deb584c3
SHA512

844ca8d37a0490d38107a4773599d3eb351ff9fd1b7e5ed3bab502f0daad6433f91b66b29d5b1837d03fc9fc625cb11afe3aa3a0138ccb68c9c0bf54a5612326
SSDEEP

3072:cQKuLBkuBRJOVJXu8MXjExh8JKetg7MD7yJA+E:hKuL+uvJOVJtMzqje

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RedbullKSA.Common.dll

Files

RedbullKSA.Common.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/opt/atlassian/pipelines/agent/build/RedbullKSA.API/RedbullKSA.Common/obj/Release/net5.0/RedbullKSA.Common.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 151KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ