RedbullKSA[.]Entities[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RedbullKSA.Entities.dll
Size

1.2MB
MD5

6c5ad76d3dd83301f30df4a446f9941e
SHA1

8a82f1583eadbefe6fbf52930135134e43ce1a1e
SHA256

6e2471c0dc5fff6cd31aa4cdd43db446c9c74d01f498d8ed3ebdec8d40278ff3
SHA512

0b6659638d51fe4d74edda6b93ef77a7740da74d04bbf0535530c667d2e4b0fe437a529b5e2cf0b8d7d13dd8c7ecfc8a8afe22ad563add3107204df36274496a
SSDEEP

12288:XUtyfXePJ8a1ca8vW1s7HNNVxN393BUa47xIp5vNbOXiwIYFHOw+FZhT0lqamTFO:1Pe7cj5nUaOxIp5vNbOXaIHmrxrLq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RedbullKSA.Entities.dll

Files

RedbullKSA.Entities.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/opt/atlassian/pipelines/agent/build/RedbullKSA.API/RedbullKSA.Entities/obj/Release/net5.0/RedbullKSA.Entities.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ