C:\release\redis\msvs\x64\Release\redis-check-aof.pdb
Static task
static1
Behavioral task
behavioral1
Sample
redis-check-aof.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
redis-check-aof.exe
Resource
win10v2004-20240419-en
General
-
Target
redis-check-aof.exe
-
Size
251KB
-
MD5
237773874b285b3c95e2e2e0c93ae525
-
SHA1
2716a7b0b77033250a9f21e89139a322bf41e89b
-
SHA256
2215a06f1e56abcaf5c8a51d82351c64e29632f8041c7a8355d90d94719ca68d
-
SHA512
6b4fc1aaec944338664a7cfef6a057d2dc48e34515b12a0e5703b40bcb713e576f254ccc891163d9f9e255fc6b8a8749f57deac0627af44147bc3c694855befd
-
SSDEEP
6144:+RmW677gH8oIv8hhTLiNpCpIL2p4dCh9t9JbN:2677dociN4dC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource redis-check-aof.exe
Files
-
redis-check-aof.exe.exe windows:6 windows x64 arch:x64
327ae0277d734168d69e4187d2496c51
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
VerSetConditionMask
VerifyVersionInfoW
FreeLibrary
GetProcAddress
LoadLibraryA
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetEnvironmentVariableW
WriteConsoleInputW
SetConsoleTextAttribute
ScrollConsoleScreenBufferW
SetConsoleCursorPosition
WriteConsoleW
FillConsoleOutputCharacterW
GetConsoleScreenBufferInfo
SetConsoleCursorInfo
SetConsoleTitleW
GetConsoleTitleW
FillConsoleOutputAttribute
GetConsoleCursorInfo
WriteFile
CreateFileW
MultiByteToWideChar
CloseHandle
QueryPerformanceCounter
GetSystemTimeAsFileTime
ReadFile
HeapFree
HeapAlloc
EncodePointer
DecodePointer
ExitProcess
GetModuleHandleExW
AreFileApisANSI
WideCharToMultiByte
GetCommandLineA
IsDebuggerPresent
IsProcessorFeaturePresent
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
FileTimeToSystemTime
CreatePipe
GetConsoleMode
ReadConsoleW
SetStdHandle
GetConsoleCP
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
SetLastError
GetCurrentThreadId
RtlUnwindEx
DeleteCriticalSection
GetStartupInfoW
GetProcessHeap
GetModuleFileNameW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
LoadLibraryExW
GetModuleFileNameA
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapSize
RtlPcToFileHeader
RaiseException
GetFileAttributesExW
GetStringTypeW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
CompareStringW
LCMapStringW
OutputDebugStringW
HeapReAlloc
SetEnvironmentVariableA
GetFileType
GetLastError
GetStdHandle
FlushFileBuffers
SetFilePointerEx
GetCurrentProcessId
SetEndOfFile
user32
wsprintfW
Sections
.text Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 68KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 10KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ