Behavioral task
behavioral1
Sample
2184-57-0x0000000004A90000-0x0000000004AD0000-memory.dll
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
2184-57-0x0000000004A90000-0x0000000004AD0000-memory.dll
Resource
win10v2004-20230703-en
General
-
Target
2184-57-0x0000000004A90000-0x0000000004AD0000-memory.dmp
-
Size
256KB
-
MD5
7ac6304c0d86ae0dd99bfa67fca965c5
-
SHA1
bd7b26349ec352baaa598c8ddb63dc4083ab1ca3
-
SHA256
b341fba51d3c7322bb761b8095f6c61734dcbe3259fbd4a8dc5e798139d19a2f
-
SHA512
1476b8479a16effbe015bbc8beef73bb641b93f3e87efaa1e3f73eff36f7861d00dee76025abca54fa8a0416212669dfe877ace0e8dbcb5d363d0c087513d8a6
-
SSDEEP
6144:187eFQN9aq3cqt4IyjHJ1wMk5EE/QlSONJVvY/bMsw4Lc/I5I0v1O+GGDG7ciE07:187eFQHaqMqt4IyjHJ1wMk5EE/QlSONR
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2184-57-0x0000000004A90000-0x0000000004AD0000-memory.dmp
Files
-
2184-57-0x0000000004A90000-0x0000000004AD0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ