Behavioral task
behavioral1
Sample
BindedUDPexe.exe
Resource
win7-20230705-en
Behavioral task
behavioral2
Sample
BindedUDPexe.exe
Resource
win10v2004-20230703-en
General
-
Target
BindedUDPexe.exe
-
Size
556KB
-
MD5
0a6713d8ea9057044e96f2f4b8cec7c1
-
SHA1
1ab168cf053ce524a3b518303b2b5b995e886da2
-
SHA256
2b452fa6e3b61b098529506ec1696a738d55b08886d56ce6a1a6df4492f53a84
-
SHA512
88cd0be9173debb427068be40560360b8ef8889aa28401878ff297f17019842b4a1576c85baac3f4ccd58bf003810c8ca3f8bff508866907e0573be316bcee21
-
SSDEEP
12288:8wqYSESaejYX4ned15Ccn1IoufyEux9tPcOwyxZm68rjC6b/1MSPo1CCQKtv3C5j:8wRSESaejYX4ned15Ccn1IoufyEux9ti
Malware Config
Signatures
-
Warzone RAT payload 1 IoCs
resource yara_rule sample warzonerat -
Warzonerat family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BindedUDPexe.exe
Files
-
BindedUDPexe.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 544KB - Virtual size: 541KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 680B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ