Behavioral task
behavioral1
Sample
1260-114-0x00000000024B0000-0x00000000024F0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1260-114-0x00000000024B0000-0x00000000024F0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1260-114-0x00000000024B0000-0x00000000024F0000-memory.dmp
-
Size
256KB
-
MD5
df8a599d8da4b138083bfc740160d368
-
SHA1
03e5d8e3e5f0f97766b1ebdaab66a88a390bf4e0
-
SHA256
b8de5eb229dce9cff519b0d99f11aa02aabe975ef9609644c2e7a05c0b4f756d
-
SHA512
3d175f7ed2d780cb89fd990a15cd8f0cde71e63873c1f6f69c8a934ed33d43cb6cde46ceab38177201531e8c0389f6c6c85ffb6f76ba095d25deab7e0d2da9e5
-
SSDEEP
3072:t8e8hZmeKGk00DcQO1y56qVemIWrnDCv2R8e8hZ:tB7Gk0qcdy56chnDCv2R
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1260-114-0x00000000024B0000-0x00000000024F0000-memory.dmp
Files
-
1260-114-0x00000000024B0000-0x00000000024F0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ