Behavioral task
behavioral1
Sample
2256-56-0x0000000000B90000-0x0000000000BD0000-memory.dll
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
2256-56-0x0000000000B90000-0x0000000000BD0000-memory.dll
Resource
win10v2004-20230703-en
General
-
Target
2256-56-0x0000000000B90000-0x0000000000BD0000-memory.dmp
-
Size
256KB
-
MD5
199c2c4f42f508762cf6138c0107da9e
-
SHA1
4071e6430dc4edf18848bc4bcceafb7527717a67
-
SHA256
77f7145582ef83be4d3327f29532a817f2f1b577260af5ba0e2b588dc3662db3
-
SHA512
fbc741b8763364400aae34a77818b62ee5e7ea510f82844b926529d231665d9f8934d07844df75f59303fc8e0953364a6f21eb41eaf577defb5f0c0cb41af150
-
SSDEEP
3072:LD+84wM+IB+SaDtsA4frSzPD/8e8h068S4s69gQu2lr:m9cSMtsA1XlS4s6Plr
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2256-56-0x0000000000B90000-0x0000000000BD0000-memory.dmp
Files
-
2256-56-0x0000000000B90000-0x0000000000BD0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ