Behavioral task
behavioral1
Sample
2204-3-0x0000000004680000-0x00000000046C0000-memory.dll
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
2204-3-0x0000000004680000-0x00000000046C0000-memory.dll
Resource
win10v2004-20230915-en
General
-
Target
2204-3-0x0000000004680000-0x00000000046C0000-memory.dmp
-
Size
256KB
-
MD5
f23ca0ab99d3ec62654ecab92584bcd2
-
SHA1
b98db8877b23a2ad6eac509a49c492bd9ddaf8f7
-
SHA256
51797151254a82c76dc96cc9043c39e1a90ecf4254587a691b32dc73e88a1417
-
SHA512
7d91b512a91dbb698e783f3581a32ae819fee252f3cd2a0a0ccda8871119449570eba372b4c6a31e323c55670fbf447e2c9d8fffbcfaf7e4c60a5f3a1c24fdea
-
SSDEEP
3072:CFRa7xI0k3jpQOP6DHpcyME0Qep5LcoJO8e8hhq89FRa7xI0k3jpQOP6F:MKxI0k3jp2cyME0dLcogd8dKxI0k3jp2
Malware Config
Signatures
-
Redline family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2204-3-0x0000000004680000-0x00000000046C0000-memory.dmp
Files
-
2204-3-0x0000000004680000-0x00000000046C0000-memory.dmp.dll windows:4 windows x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
mscoree
_CorDllMain
Sections
.text Size: 512B - Virtual size: 420B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ