Behavioral task
behavioral1
Sample
1636-91-0x0000000004B90000-0x0000000004BD0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1636-91-0x0000000004B90000-0x0000000004BD0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1636-91-0x0000000004B90000-0x0000000004BD0000-memory.dmp
-
Size
256KB
-
MD5
3a0553943e2dd138f7f90aa84eacdd5b
-
SHA1
345e59ad2e8ce83c02ea2a8c4cee68898fd8fd64
-
SHA256
dae65fe8e342974d73fc3ba08a0c1fab339e5d0966f55f3b59c414544e61e654
-
SHA512
bd92c4023a1e7a1bd29d675d08b4df4c8a655c5bb54d5aed5079826a0ff17f0cc32a04f9f10727bfdd78a944fb7fd80fc0f8a9e5e0f3fb4f0678526d44fb242c
-
SSDEEP
3072:VDGCzj6N8xNRmhKhmtktUdty8e8hs/WiDGp:z+NiXmtktUdtynWv
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1636-91-0x0000000004B90000-0x0000000004BD0000-memory.dmp
Files
-
1636-91-0x0000000004B90000-0x0000000004BD0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ