Behavioral task
behavioral1
Sample
1724-56-0x0000000000590000-0x00000000005D0000-memory.dll
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1724-56-0x0000000000590000-0x00000000005D0000-memory.dll
Resource
win10v2004-20230220-en
General
-
Target
1724-56-0x0000000000590000-0x00000000005D0000-memory.dmp
-
Size
256KB
-
MD5
1e51a2f644fd8d67ccf26ae947738072
-
SHA1
d365a826f90cf438eddbaa0b903f30cc7ea0e890
-
SHA256
f9563678d5bd2b5724168d731480275915ed1b37bd2f25337cedf0727c1a9ac5
-
SHA512
ab1025d527f2ff778e8c3c19497979a496e1732a1ac4fe5112ad1d066e0feec9ce42dcbcec9ba677dea9c6419315940d3ce23ba037432fd81831a1e4d34a417f
-
SSDEEP
3072:q8e8hhkzYak3HcxNXwZJs+RxfZ8e8hhmvQ6caQR:q76oV+RxfZJly
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1724-56-0x0000000000590000-0x00000000005D0000-memory.dmp
Files
-
1724-56-0x0000000000590000-0x00000000005D0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ