RedbullKSA[.]DataSeeder[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RedbullKSA.DataSeeder.dll
Size

121KB
MD5

cf3ca2c8718661eba9bd68bcc820e3de
SHA1

1042fa730eb646020ab243f7060b31b559c3bc47
SHA256

493b81a487e7945e7ba4f26e4034dbcd83358dd6799c7afe4f47a63c5f964b9b
SHA512

251ddea9176017d72202fb7ac11d3048f4e456042d37fe00a76e6985b0d0b8547839056469484e9cbac6f397c71e316f9f366debf83c6d1a920227b6f383e18f
SSDEEP

1536:P/vvlGcaKKAarOnf9UCd/OR6slnz06l+EdjAXMg6saPBGMKsg3SC:P/vvlGoaKf9zz6TFVgaPBGMK73R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RedbullKSA.DataSeeder.dll

Files

RedbullKSA.DataSeeder.dll
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

/opt/atlassian/pipelines/agent/build/RedbullKSA.API/RedbullKSA.DataSeeder/obj/Release/net5.0/RedbullKSA.DataSeeder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 119KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ