Behavioral task
behavioral1
Sample
1052-3-0x0000000004A10000-0x0000000004A50000-memory.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
1052-3-0x0000000004A10000-0x0000000004A50000-memory.dll
Resource
win10v2004-20230915-en
General
-
Target
1052-3-0x0000000004A10000-0x0000000004A50000-memory.dmp
-
Size
256KB
-
MD5
f631a0ea7d325ae9c1dc95e4f68f00a5
-
SHA1
b1bae8849adcded41e4a90945ff62f8a6ff5e70f
-
SHA256
291812b050cb06e4bf081503e4736a6933dc7163c60a87b8e55cf81925ad34e5
-
SHA512
d6306f80565ef89bff45fe1891b6122f59378ea7084bcf303259b62b5b9f79f6412572fc5ed72207265a813b06bba96027f4c523a34b7c13944b03e4f14f25d7
-
SSDEEP
6144:MKxI0k3jp2cyME0dLcoClf8dKxI0k3jp2:bxI0KKyLcoCdlxI0K2
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1052-3-0x0000000004A10000-0x0000000004A50000-memory.dmp
Files
-
1052-3-0x0000000004A10000-0x0000000004A50000-memory.dmp.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ