Behavioral task
behavioral1
Sample
1276-115-0x00000000024C0000-0x0000000002500000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1276-115-0x00000000024C0000-0x0000000002500000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1276-115-0x00000000024C0000-0x0000000002500000-memory.dmp
-
Size
256KB
-
MD5
2b0ed51cddf751a3e7bdd4305a58c8ac
-
SHA1
35116da2fab58e6f65b3d5cd29334656086701f9
-
SHA256
268b74d889c78d55edc123e60276e858532a7c01e492533cf9b1b0f359cceddd
-
SHA512
bdfb13c79c3b535e3c825c79d824b2e9ac54209a193fbb4aa90a62d32b24801666bd4c6b128e534d0a8baba60150d51a58589b59eced442799d43a2a57c8eaf8
-
SSDEEP
1536:EGRxAxNkwYQvBbuFBXSMusF4k90GkRU8e8hikrKZ+q6hVmwG36sv0W7T6xAarHL:EcAxNKcbMhF4k9n8e8hikeZ+q6hVbwIL
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1276-115-0x00000000024C0000-0x0000000002500000-memory.dmp
Files
-
1276-115-0x00000000024C0000-0x0000000002500000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ