Behavioral task
behavioral1
Sample
1908-86-0x0000000004B70000-0x0000000004BB0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1908-86-0x0000000004B70000-0x0000000004BB0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1908-86-0x0000000004B70000-0x0000000004BB0000-memory.dmp
-
Size
256KB
-
MD5
b4077b01d295520bdd6c799dcea9d1d6
-
SHA1
6c4eac2efb38e3eccf6f579e3462a3ce402249e3
-
SHA256
9bc07fe0c5549445418afeb2fafbd21a11f47f6db326da28366b4b42cd7e2bdc
-
SHA512
9a259d69706db1a86f37138d3ee3cc3ddee06113b733d6753028a189d8125998a9e9ec76da979423a8d18b7165704222a0b0154e9bb288f517399fb44a0422aa
-
SSDEEP
1536:waYTGqVMdWbuA0u8InQ6F84wYkw8e8h523epARqhVZCGWa6dZPFjP8Wgf62SDqvj:rqVMEODInQ6F18e8h5qemQ6p8Wc6+j
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1908-86-0x0000000004B70000-0x0000000004BB0000-memory.dmp
Files
-
1908-86-0x0000000004B70000-0x0000000004BB0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ