Behavioral task
behavioral1
Sample
836-56-0x0000000002150000-0x0000000002190000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
836-56-0x0000000002150000-0x0000000002190000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
836-56-0x0000000002150000-0x0000000002190000-memory.dmp
-
Size
256KB
-
MD5
1c07b58c2fcf386095d24ea226a8e06e
-
SHA1
3e535c97dc2949c201d301c3629afd6dc03ee42e
-
SHA256
9aa3a771da739c33e322f6af44457283ad7c968008802b5f6e9dc2e32c4a728b
-
SHA512
5b98c6cf2d3adf462d1c60227ba9b68ea40f8f85d8e109365cce0ca46cecacfa78a0bd9f31314746fd1c423cfdb8526417950f957a6b375e627d3e311920ab0f
-
SSDEEP
3072:62AH8WzSEXrWS0qVyMAFWqsvP2mwQO8e8huU3b2AH8WzV:65N/IJ0P2mwQOC3b5NV
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 836-56-0x0000000002150000-0x0000000002190000-memory.dmp
Files
-
836-56-0x0000000002150000-0x0000000002190000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ