Behavioral task
behavioral1
Sample
1524-102-0x0000000004B00000-0x0000000004B40000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1524-102-0x0000000004B00000-0x0000000004B40000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1524-102-0x0000000004B00000-0x0000000004B40000-memory.dmp
-
Size
256KB
-
MD5
a297bcdba4785dcdc002675568f352f2
-
SHA1
f0e37fa45361ec3d2b141a74c843daff78bf2edb
-
SHA256
3bfbdfd0e20e1cd902201635f43e30c22281adf975bdddf233a33ecb78ac0c1f
-
SHA512
c4f4777fa6a5b8624013eed39b6b29a36b696636e858f22e13c38df6e7b44d0572cb9c078405be94aa2ea880f6c7c1fb4b5389be054381b0fb7f3ab1b26247ea
-
SSDEEP
3072:PhiTh8W0w+HghB4zEqVUcOdb81rb/DJ8e8hVf:PhWQZBEbTdurb/DJq
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1524-102-0x0000000004B00000-0x0000000004B40000-memory.dmp
Files
-
1524-102-0x0000000004B00000-0x0000000004B40000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ