Behavioral task
behavioral1
Sample
1304-66-0x0000000004C40000-0x0000000004C80000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1304-66-0x0000000004C40000-0x0000000004C80000-memory.dll
Resource
win10v2004-20230221-en
General
-
Target
1304-66-0x0000000004C40000-0x0000000004C80000-memory.dmp
-
Size
256KB
-
MD5
f0e80fd9cae5cd049827edded584e1fe
-
SHA1
8fe70e9d1b0139fd92949a515208b45aa286b26c
-
SHA256
07e66195a899905b4051a40ceee45aa4548765ecc3bbd831d8d2579a818c20bc
-
SHA512
55cac0478c3d143bd7b2a07ab51d8fbd6793cd5e098fd78fd5cd103f345dfe32ab2ba7fd60ff601cc1bd116f7ad936a9f488e43b22ec9c9d5fc6895c0cd70943
-
SSDEEP
3072:o8e8h3Ad3+b8T3Ei8Wej9gWqVSYQRqHd3l8e8h3nY:oDd3sS32rpwHd3lH
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1304-66-0x0000000004C40000-0x0000000004C80000-memory.dmp
Files
-
1304-66-0x0000000004C40000-0x0000000004C80000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ