RedbullKSA[.]Services[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RedbullKSA.Services.dll
Size

2.0MB
MD5

6ff7bf21f04d003ec6f3f482d1644594
SHA1

ead980ac34f9cddccb52907be01cdad8cd99334a
SHA256

f4a663b57a61515d74ecdb45e6688bd1fb1a84d1d35e9ff1c42ce0e7fcd19669
SHA512

a087348f8698777aa74e66c54f01083c4aed1bc668504c07d70355743140401d43de7e83d9aefd0ca58a593536ab20606cea8fd765da25fd452879ebbec2481f
SSDEEP

12288:7kOVL8eixY+5/DJvoF1FMU7hzvReNN9DrMpA3vK6tdj2HgOAYqnumj93kSlpi3xd:lGxXvoF52/tYRIj7ZJB6tl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RedbullKSA.Services.dll

Files

RedbullKSA.Services.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

/opt/atlassian/pipelines/agent/build/RedbullKSA.API/RedbullKSA.Services/obj/Release/net5.0/RedbullKSA.Services.pdb

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ