Behavioral task
behavioral1
Sample
1244-56-0x0000000004AD0000-0x0000000004B10000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1244-56-0x0000000004AD0000-0x0000000004B10000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1244-56-0x0000000004AD0000-0x0000000004B10000-memory.dmp
-
Size
256KB
-
MD5
c37bcb4579e2036eb4bf4f029397dd60
-
SHA1
93cac81c73a34ee9fbd83b3e0518c047f172ad7d
-
SHA256
3acf5975fcb6f0e5198c3972e6c352112e1043df155d54e64ed5e5759019de5f
-
SHA512
55ccaef73fe0bc515351aef2a0880de08e54bbf9999f2bcf046b98ca6176a8e3ca56ec3e72dac17035d93338e4eb0e67fd5881850cd9536c0a1702329066e844
-
SSDEEP
3072:v8e8hisiI5Z+q6hVbwIxxiIDg8qAxNKcbMhQ4k9F8e8hi:vCioZ+q6P7ihjB654k9F
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1244-56-0x0000000004AD0000-0x0000000004B10000-memory.dmp
Files
-
1244-56-0x0000000004AD0000-0x0000000004B10000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ