Behavioral task
behavioral1
Sample
1944-101-0x0000000004C80000-0x0000000004CC0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1944-101-0x0000000004C80000-0x0000000004CC0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1944-101-0x0000000004C80000-0x0000000004CC0000-memory.dmp
-
Size
256KB
-
MD5
9b31739b5285d54d7610c30bb0d127f8
-
SHA1
e8cf151a61db7a012916dd2625f63c256db0e348
-
SHA256
0ebdf0732a026c4576b042f8c4abc229b289b801ae35ca3f066ac278c15a4b12
-
SHA512
3ac3515025ea9ff5b953298efe6e0573e77b1b6716c620b0b592d36c92bf21c00fdbf8bb62861607acb5bedc457e15aa0f91e326a7dbf32dccc3671088c8ed7b
-
SSDEEP
3072:J8e8hFYnkkGLc8WBkOjqVs8Ao9sKfyN8e8hFP:JnVGqvL97KfyNe
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1944-101-0x0000000004C80000-0x0000000004CC0000-memory.dmp
Files
-
1944-101-0x0000000004C80000-0x0000000004CC0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ