Behavioral task
behavioral1
Sample
920-56-0x0000000004990000-0x00000000049D0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
920-56-0x0000000004990000-0x00000000049D0000-memory.dll
Resource
win10v2004-20230221-en
General
-
Target
920-56-0x0000000004990000-0x00000000049D0000-memory.dmp
-
Size
256KB
-
MD5
56d1ff166f26b8eba067f3aa1d26d0ad
-
SHA1
a6880e7905e119ba1ebe1ffd53ca59f68ba53c04
-
SHA256
f19f277caef1cf600651452a714dd375a9eb6a1b280beea3414ae5697f3c02d3
-
SHA512
c80dcd5826401ac84f2fffb3e812da12e4966c6654f17b7982b15ab21ee0919ed02a3fddf1d3be5ebc0509a4df4160f7c631e52a6520f1075d87dafbcb59d8d0
-
SSDEEP
3072:v8e8hisiIDg8qAxNKcbMhQ4k9G8e8hiteZ+q6hVbwIL:vCihjB654k9GHeZ+q6P7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 920-56-0x0000000004990000-0x00000000049D0000-memory.dmp
Files
-
920-56-0x0000000004990000-0x00000000049D0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ