rzr-cod4[.]exe | Triage

Sharing

General

Target

rzr-cod4.exe
Size

96KB
MD5

8d87f601d5f583cdf02105c82bb7f675
SHA1

c5e0829f0443fec9faa1ff5de28bdc8d2b81e5f6
SHA256

bb72b2007a9bafcb87f0c258bc30be8c8706f3073bdae54410425457a73d6596
SHA512

3ecb8102e3a790bd33cff713a6e998bf57ca7640620409c841c13fe5a08d34d31e0de495517a88b64437744bf0bb2ba3f79fe5d370e63e227e332ed87e293e7d
SSDEEP

768:Ez4uZxY2KS+J+VUwFM0N1lTZzlE1Zn7Aue85sG5K3hSgTtG4z7XPsBZfPlHG:YxHYcO0NnTZzlcZ7peThSisBZfPtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rzr-cod4.exe

Files

rzr-cod4.exe
.exe windows:4 windows x86 arch:x86

1c4e1c16c172c337d2629eb439489af4

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

DeleteObject
CreateFontA

kernel32

GetTickCount
GetModuleHandleA
ExitProcess

user32

wsprintfA
DialogBoxParamA
EndDialog
GetDlgItem
LoadIconA
SendMessageA
SetDlgItemTextA
SetFocus

Sections

.text
Size: 4KB - Virtual size: 777B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 438B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.RZR1911
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE