Behavioral task
behavioral1
Sample
08507199.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08507199.dll
Resource
win10v2004-20230220-en
General
-
Target
08507199.dmp
-
Size
256KB
-
MD5
43a1d823fd8fe2536c03009945dbe67f
-
SHA1
62e46241c2194c68b415b68a7a9479a710693a08
-
SHA256
8d3c72a754a640f2f3eeba7ebae2f19125c7f8ce758cd2b6b34c3bba8dd983f6
-
SHA512
aa7c2300f24c97285046bdeeed2d2db84a1189a21a1905d45f62647d82a90e137152c470bf242ee501f13d5a9cc247be96350bf0b6bc7b5e1c983e5f3e8917e4
-
SSDEEP
3072:asiIDg8qAxNKcbMhQ4k9r8e8hik1Z+q6hVbwIL:tihjB654k9ri1Z+q6P7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08507199.dmp
Files
-
08507199.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ