080d8d3cf6f8028b1d0933203143febb | Triage

Sharing

Copy URL Twitter E-mail

General

Target

080d8d3cf6f8028b1d0933203143febb
Size

50KB
MD5

080d8d3cf6f8028b1d0933203143febb
SHA1

bf63df84b79e95b8d7597446ea881f365535c08d
SHA256

e5419ce4005b586cd6086ed55a7b8c7114cf21ace50a89e7d490bd0a09496872
SHA512

e821650a19995c60e480b5c8f9a9a1f1ae973badf5c520cfe12b40f5e3bb7ffc28ffc4f3ebc616e878849cba10eb2118124b45224c1895aa2be3faebe6b5dd76
SSDEEP

1536:AkVVZO88ggExVYtCmoZ133XEvclHADZpo:AUZ/OC5r33XgclHqDo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/rzr-c5kg.exe

Files

080d8d3cf6f8028b1d0933203143febb
.rar
rzr-c5kg.exe
.exe windows:4 windows x86 arch:x86

1c4e1c16c172c337d2629eb439489af4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
CreateFontA

kernel32

GetTickCount
GetModuleHandleA
ExitProcess

user32

wsprintfA
DialogBoxParamA
EndDialog
GetDlgItem
LoadIconA
SendMessageA
SetDlgItemTextA
SetFocus

Sections

.text
Size: 4KB - Virtual size: 777B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RZR1911
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE