Behavioral task
behavioral1
Sample
980-117-0x0000000004CA0000-0x0000000004CE0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
980-117-0x0000000004CA0000-0x0000000004CE0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
980-117-0x0000000004CA0000-0x0000000004CE0000-memory.dmp
-
Size
256KB
-
MD5
284379117f10cebf4669087cceea4dbb
-
SHA1
8d4c1773eae38f0718f3d6f3089bee8d408fe235
-
SHA256
18ae0f7b92cee2461fa84a6c278b2617ea2d8a921958c3b1f15a16e47d373c1e
-
SHA512
21013c4bb00c9c8dfd56b79bac8f5fae6b4dacf98ec88d6aaccc72b0affb951db63ce7f5375d70194bcc3c5fade64bd23f96a74b1a954d5f016777d4bd3954f3
-
SSDEEP
3072:fGKbe97H9rWRxNB2NjrOSHyd8e8hgJ3BF8QOIKW:GVdaHMOSHydNv8s
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 980-117-0x0000000004CA0000-0x0000000004CE0000-memory.dmp
Files
-
980-117-0x0000000004CA0000-0x0000000004CE0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ