RACZA[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RACZA.exe
Size

625KB
MD5

52efb9f461c7e04f0202ae16a07b2605
SHA1

5379b2feac9d0ed95034deb7c241de2f4404bfb7
SHA256

aa74685cedd9d15193aee51038e7cf93b867f995f3bb372083788b6c1edfa52e
SHA512

f29e6031a4f43baa239d3ddeae7da60d928c7efc723aecdd42b3c817b307f968fea00389a3f7842f9330cd1fd5914a777dddf9ebe072e57dab1a3f82557c5f0d
SSDEEP

12288:fa7FNxfOak2gw0+DuATFqnk6c85ALLSQTIyHvJk9n2Ba84GprTzLmwMuI:CNvigYnk+5+BtM6a84eTzLm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RACZA.exe

Files

RACZA.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 623KB - Virtual size: 622KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ