Behavioral task
behavioral1
Sample
WARZONE-RAT 3.03 Cracked.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
WARZONE-RAT 3.03 Cracked.exe
Resource
win10v2004-20220812-en
General
-
Target
WARZONE-RAT 3.03 Cracked.exe
-
Size
256KB
-
MD5
2f79772ae152e9943a0d1513b69d7267
-
SHA1
f63dd64f23d29400ff879daa607163ef50792c15
-
SHA256
7ba6a7b27fd9ea2c66b24c8c9d70db7d9046847ecd3e8e7b5f27373a8b8d97fe
-
SHA512
e5bb3d62d6a999b0299e378e88b7a7efe3d271d54f9fc187ab9f83866c965fe6c5cb71ee9111d9b5b4c7591b9a56ef14f4bb9c726e850b80c4e460239343926f
-
SSDEEP
3072:q8T+wO5xYQmkKzTA9vX/A/1/mBm87CUjMr/DNI1IVZQLv0e0UOpiu/:q8T+fYtA9yBBm1IVZQLvi
Malware Config
Extracted
redline
FONDNESS
89.22.234.180:47525
-
auth_value
8dd80c7c3aad106b12e2f6a3afd7a250
Signatures
-
Redline family
Files
-
WARZONE-RAT 3.03 Cracked.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 165KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ