Behavioral task
behavioral1
Sample
04776499.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
04776499.dll
Resource
win10v2004-20230221-en
General
-
Target
04776499.dmp
-
Size
256KB
-
MD5
756d82b08436313bd54b8ba8107fc6d2
-
SHA1
261ebc1730d6a177ac3381b8ca5d99a951bae98f
-
SHA256
7329c3d1df2878f115d2ae2ef42456ac5a25c39ccc5d36999eefefbb722e442c
-
SHA512
31f0b9c6c3299d00bc22df13633a450e094fed4e24c48d726b381419d8e213f0a9e396a340be72273e3f3eb3a7105633a342d17c543e1aeff6aadef11779e576
-
SSDEEP
3072:v8e8hisiIDg8qAxNKcbMhQ4k9t8e8hirZ+q6hVbwIL:vCihjB654k9tJZ+q6P7
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 04776499.dmp
Files
-
04776499.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ