Behavioral task
behavioral1
Sample
1856-125-0x0000000004E00000-0x0000000004E40000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1856-125-0x0000000004E00000-0x0000000004E40000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1856-125-0x0000000004E00000-0x0000000004E40000-memory.dmp
-
Size
256KB
-
MD5
8aadb37253b55f23a5bca26fcb9ad25c
-
SHA1
3cb7cb5d588fa4645309de1122c6fc434380ec01
-
SHA256
0cb18bb241dc32f5adebe9fd1dfd337ac8492bda8a597dfbdb443f94982ea3ae
-
SHA512
fae30440a7fe6b359859f82a2224e34384e6263354838b7b05738299ca6f791763076c66cbb54024755c950feeb38f318e2f16644f8b0fd8764b911becdc69e4
-
SSDEEP
3072:h8e8hgClaTvI2t2qVwoMTOIkvlD8e8hgckmfv4r8W2B:hGlp/RfkvlDcfvhB
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1856-125-0x0000000004E00000-0x0000000004E40000-memory.dmp
Files
-
1856-125-0x0000000004E00000-0x0000000004E40000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ