Behavioral task
behavioral1
Sample
2040-56-0x00000000046F0000-0x0000000004730000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
2040-56-0x00000000046F0000-0x0000000004730000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
2040-56-0x00000000046F0000-0x0000000004730000-memory.dmp
-
Size
256KB
-
MD5
f37cd37096d91298f3dfb77c702bb4bb
-
SHA1
09e91d98c4c3b9e19b235884e3f8668eebf1616e
-
SHA256
86a15a185ff22e27df45e3f6dcd62aed84b690466008833098b3fec7dec8c6ae
-
SHA512
80cf597d991527bc5099eaccb89e8b75c0d2b76fe1b5e338ee4350f414f59a7d11c14ea1d1c507b5ac8e2b2e8eb49e8eea6476676b366df13e30928a15247c79
-
SSDEEP
3072:v8e8hisiIKZ+q6hVbwIxxiIDg8qAxNKcbMhQ4k9b8e8hi:vCi/Z+q6P7ihjB654k9b
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2040-56-0x00000000046F0000-0x0000000004730000-memory.dmp
Files
-
2040-56-0x00000000046F0000-0x0000000004730000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ