Behavioral task
behavioral1
Sample
2304-3-0x0000000004A90000-0x0000000004AD0000-memory.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2304-3-0x0000000004A90000-0x0000000004AD0000-memory.dll
Resource
win10v2004-20230915-en
General
-
Target
2304-3-0x0000000004A90000-0x0000000004AD0000-memory.dmp
-
Size
256KB
-
MD5
7696415924d54e0489d3bdd98a47faf3
-
SHA1
d6d4e2dd71b682364d2c130781d10f41783a4a9b
-
SHA256
5b539a24617da21421838b729bc965006b48e9a376ee6abbfd9f060e0d716460
-
SHA512
74cdee3b3993220993eed3bfe109b360cb7ca2fb3b3726c6c1f8059f84f20967617fda1579e1029dd77b92a4569e1c706ccc6a3c3f13429802ec0157d3472b65
-
SSDEEP
3072:CFRa7xI0k3jpQOP6DHpcyME0Qep5LcoJW8e8hhX9o89FRa7xI0k3jpQOP6F:MKxI0k3jp2cyME0dLcoot8dKxI0k3jp2
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2304-3-0x0000000004A90000-0x0000000004AD0000-memory.dmp
Files
-
2304-3-0x0000000004A90000-0x0000000004AD0000-memory.dmp.dll windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ