Behavioral task
behavioral1
Sample
576-76-0x0000000000DE0000-0x0000000000E20000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
576-76-0x0000000000DE0000-0x0000000000E20000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
576-76-0x0000000000DE0000-0x0000000000E20000-memory.dmp
-
Size
256KB
-
MD5
a69d52b9860158bffa93d48a9181cb8d
-
SHA1
9bedd35018951050dc2ff3c4ee97ef4d15011f06
-
SHA256
77261b1134e511732d9fbd663bca1fe8c321d5cd23f568331d2d7bc01e68c8d3
-
SHA512
be3473c3eab52112c797202858c0db0569e99da50cdab981e846bc8e7d9835b23989575d37d026f07978158a72aea88b53799c49f39c9e453358a9626dd573c9
-
SSDEEP
3072:L8e8hROKlcdQPqVYI5vDnRYKlQ8e8hRmiqFk8WTV3:LZKlnHGnRYKlQhiqU3
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 576-76-0x0000000000DE0000-0x0000000000E20000-memory.dmp
Files
-
576-76-0x0000000000DE0000-0x0000000000E20000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ