Behavioral task
behavioral1
Sample
828-56-0x00000000003A0000-0x00000000003E0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
828-56-0x00000000003A0000-0x00000000003E0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
828-56-0x00000000003A0000-0x00000000003E0000-memory.dmp
-
Size
256KB
-
MD5
73cc027cbcaaf918c7f565bbf8e2d046
-
SHA1
eeef9a7b36bb0c0d5eb333827331f1bec585dc6b
-
SHA256
7f35ca5ba414c6e18b91a70f1bf9862d1fda1b15acb5631cc8f2cd844994e798
-
SHA512
cafd3b5aada5fb743b576a95e452c84df75759c59468139c12668b355a0449ded45c900fcbc64e9ddb8dd5dd7ce117256cea28ed3e39e9091601beb9dafacf69
-
SSDEEP
3072:Bus8Wk2L1Uo+qVAw9v4IzKif8e8hCWIo28us8Wk2b:BoEOo+HdIzKifC28oa
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 828-56-0x00000000003A0000-0x00000000003E0000-memory.dmp
Files
-
828-56-0x00000000003A0000-0x00000000003E0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ