Behavioral task
behavioral1
Sample
1904-114-0x0000000004930000-0x0000000004970000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1904-114-0x0000000004930000-0x0000000004970000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1904-114-0x0000000004930000-0x0000000004970000-memory.dmp
-
Size
256KB
-
MD5
1c2dc93b1d352de692bcdd056e7bc494
-
SHA1
2ce09817df2dc96d6c6762cc1a0d8f2b045b5fc1
-
SHA256
9c170ba562f9afbc26e501975bb6306922cf5a4f9a5a4a6390d8c8f47f879864
-
SHA512
84cda3480e9f63cb67a21a73c59adcba7f04b9351b1689a70773c6664ca9eb28d862ea9bbd2a82ea0e4797c983718b920bb873522c4c7f9cade8765351eb71bc
-
SSDEEP
3072:w8e8hrfOdpCC8cO7qV2k2obrgOdh8e8hruC3YAOj8Wc2CF:w+OdpCLdVOrgOdhWYAh2CF
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1904-114-0x0000000004930000-0x0000000004970000-memory.dmp
Files
-
1904-114-0x0000000004930000-0x0000000004970000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ