MrRayzoAutoPatch[.]exe | Triage

Sharing

General

Target

MrRayzoAutoPatch.exe
Size

16KB
MD5

3daee062c7dd64743822419a2144d9a0
SHA1

d1399abf66ed955c36ce15347c90a5a2b5ff7c2e
SHA256

a256bd32cd7f4b16f1c67adfef17f4beb145b80054e1f30b2531b706082737dd
SHA512

ee4355de5d1837a0584b6ebc3a4da5b9a01a2347182300684479904bff4b930786cb31994b3c7c8c47b7957afab9c1157a47bca78e86ef3cec5e244782d3b93f
SSDEEP

192:o7/hwnW81XydYh6wD2dgln3hQznC4a/xHhMaX485TWu3EsdXllzh4DJsFZRnEAQ:6hyHmYd20SDC4IhMaX4OzEsdVRiJ+Z9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MrRayzoAutoPatch.exe

Files

MrRayzoAutoPatch.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ