ive recently dumped a few mem page sections of a possibly malicious dll. However, I can't analyze the files correctly since i don't know how to allign all the sections correctly for analysis at once in IDA. I can analyze them individually but many values are displayed in red under names like v123456789. Can someone guide me in the right direction?
If possible, please try to dump modules together.
If that is not possible, load any of them in IDA and go to
File -> Load file -> Additional binary file to load each file one after another. After selecting the file, IDA will display the following dialog:
Here you have to make sure that each part is loaded at the right offset.