Rizz[.]exe | Triage

Sharing

General

Target

Rizz.exe
Size

174KB
MD5

2448a49de1919007c5fa2c6cff68128a
SHA1

b79440b6915f96764ba36b3fc96217cdbafb4569
SHA256

e4f1c8b327456ae1d6fa41dcf811be543ecf548ff02e2fd524757cd4c0d42bea
SHA512

f21a0936c02f39563398119bf2df87c2be18e0ba27732eb4e1994c74a7af7662c457c46cce353c4903ef7d136bdd88567385e029a45a76119b27c5ee29eb1e38
SSDEEP

3072:ceq9NzLdKE49oJMfF/H9Nh8SKfbzxcwg7es6/Vsb8VKTu:cxndU9bfF/H9/UhcX7elbKTu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rizz.exe

Files

Rizz.exe
.exe windows:1 windows x86 arch:x86

140094f13383e9ae168c4b35b6af3356

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateThread
ExitProcess
GetComputerNameA
GetModuleFileNameA
GetModuleHandleW
GetProcAddress
SetErrorMode
Sleep
VirtualAllocExNuma

shlwapi

PathFindFileNameA

msvcrt

malloc
free
memset
strcmp
_strcmpi
strcpy

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 508B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ