raze[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

raze.exe
Size

9.6MB
MD5

6b6a21bbffc3f57d714e8fea5476b645
SHA1

decf41eac495ef0cd06d83ec0448f61d4614ed5c
SHA256

f4c002251e4ae8f24748389198c742e3259d551c0944cd86564bb87fb917391e
SHA512

627aba47284ae321fb981f1800782d5cc090cda88393518ce42273478354380d09977b96fed031678cd07d343437da266abed3e87307118b28633141f795f091
SSDEEP

196608:ajaRQ10I+obJrHuQaRZeT6Mtw+n/rUs1l8yZssd0JIEpWZCAQ8By4E5x:V+10I+JQeeGMtpn/rYyZ70JIEpWZTQug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
raze.exe

Files

raze.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

PFV0
Size: - Virtual size: 6.0MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PFV1
Size: 3.4MB - Virtual size: 3.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE