Behavioral task
behavioral1
Sample
1416-56-0x0000000001FB0000-0x0000000001FF0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1416-56-0x0000000001FB0000-0x0000000001FF0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1416-56-0x0000000001FB0000-0x0000000001FF0000-memory.dmp
-
Size
256KB
-
MD5
31ff2ff223b31fd8453c88dd28df29e2
-
SHA1
2508936226e46216f7a26f9ce48521ec81ad077b
-
SHA256
36867ebe0f2057df7efa585fec2090a891af175a085618b4f0189be34d7bf4aa
-
SHA512
df415e31c200ab9b1ea16ed1d587d11781bba74371e8e3f2f8e6a4f9fb537ecaeeda13e2d53d3a6d4d4afe81e8930afe17f415e2a7a9e5f7fa09914a2cd70946
-
SSDEEP
1536:b+mTtqlVZRGWmaMrO4rqEuLGXS+PFc5VQTGqVgbuiX+acn83wYkb8e8h+rBBwHLo:X1oIuLb+PMVBqVwfFcnB8e8h+4rAO18
Malware Config
Signatures
-
Redline family
Files
-
1416-56-0x0000000001FB0000-0x0000000001FF0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ