Behavioral task
behavioral1
Sample
a68e9a2f9e2e8e7bebf0e5abaefff5f3.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
a68e9a2f9e2e8e7bebf0e5abaefff5f3.dll
Resource
win10v2004-20230220-en
General
-
Target
a68e9a2f9e2e8e7bebf0e5abaefff5f3.bin
-
Size
256KB
-
MD5
a68e9a2f9e2e8e7bebf0e5abaefff5f3
-
SHA1
9e864be6b4bd2c1a08d23507603a762fc9e808b5
-
SHA256
29c7bff08ed428038de5dc73e1ccf8393c336de584a096145b6af45282346209
-
SHA512
bca7a3aeacd1db9ec7d932398e3b4d4fb9a3beb00422c60ca4effa61266fd6589a6ecfee39f64c397562ce3a2c244089463a89444cda8b268042c66c2729626d
-
SSDEEP
3072:E8e8hh+YVBbcqVcU+2iGCs8e8hhXG+DW8Wj9:EZmB4LzGCsV+i9
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a68e9a2f9e2e8e7bebf0e5abaefff5f3.bin
Files
-
a68e9a2f9e2e8e7bebf0e5abaefff5f3.bin.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ