Behavioral task
behavioral1
Sample
2044-56-0x00000000044E0000-0x0000000004520000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2044-56-0x00000000044E0000-0x0000000004520000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
2044-56-0x00000000044E0000-0x0000000004520000-memory.dmp
-
Size
256KB
-
MD5
6096b9d30599d9d584ff1aab19ae4dbf
-
SHA1
28fbf3e70bf70cde0eb123cbcd11ed04f47015fa
-
SHA256
42a7ecbe7083f138f5d7ebf7c82a588a814068a58b67ff232dd9b27e7dc88e84
-
SHA512
a20e4b2a49f484ec9cbb76752f4ab0b0f048238e218e49823d394361b267042d20b686573d23c365cf402ba9abdfc9d35b77db5b57a38f72f5cff25e894b4272
-
SSDEEP
3072:v8e8hisiIDg8qAxNKcbMhQ4k9j8e8hit0Z+q6hVbwIL:vCihjB654k9jH0Z+q6P7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2044-56-0x00000000044E0000-0x0000000004520000-memory.dmp
Files
-
2044-56-0x00000000044E0000-0x0000000004520000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ