Behavioral task
behavioral1
Sample
08914099.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
08914099.dll
Resource
win10v2004-20230220-en
General
-
Target
08914099.dmp
-
Size
256KB
-
MD5
0acad2e4d062afcbfaafce04c23b424f
-
SHA1
cc3cc43a593d113365a20e09aec1332438c1f357
-
SHA256
85784c35ac6195badf2944a3b47f447d0134a4a4506c55612c7fa154f2ff4e1b
-
SHA512
79324d5536923b735ac458f3d051f41e4208b1fb13a09c9d2030a2bbb900a2e71074ad0e2a73adee8cd54dbf9c5c90e430128b9730255ce82e870301fef2059c
-
SSDEEP
3072:v8e8hisiIDg8qAxNKcbMhQ4k9K8e8hikvZ+q6hVbwIL:vCihjB654k9KivZ+q6P7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 08914099.dmp
Files
-
08914099.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ