Behavioral task
behavioral1
Sample
1700-86-0x0000000002420000-0x0000000002460000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1700-86-0x0000000002420000-0x0000000002460000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1700-86-0x0000000002420000-0x0000000002460000-memory.dmp
-
Size
256KB
-
MD5
941c613ef44060f8d28b51e1ef390e06
-
SHA1
8a1db5ef59ab2b369b580cca6086ef7bf08b325e
-
SHA256
178b9d8de915d6d2af05a66181bc91471f19112edcd4e342ad38c7f47e81aefe
-
SHA512
27c65b8e6740669608b32f3664c083a6fee3670ede46f9757814f411458c54795c070149bf7f1e7d8c73ecab5f36b9a3ba5abed33c17556dcacf7a46f0fed00c
-
SSDEEP
3072:u8e8huZQDEXrWS0qVyMAFWqsvP2mwQx8e8hubJ3b2AH8WzV:uTQIIJ0P2mwQxNJ3b5NV
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1700-86-0x0000000002420000-0x0000000002460000-memory.dmp
Files
-
1700-86-0x0000000002420000-0x0000000002460000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ