Razer[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Razer.exe
Size

489KB
MD5

00019797e6b6e4c61803c8ca05fa38b6
SHA1

b616609de4e888150ee908d402c7ec961018f9c4
SHA256

6c2c4845265c4652f994f4e11c5af5f62455cd34a6863c525ec0585490d63460
SHA512

51c14ff9e286d95514d064da8eab441a6568d49924c944febe59b2d13f3e388a82a320fcbff8f134295ba1d9f65307e36f758e50585c05bb58e596cf6d8a7868
SSDEEP

1536:ZFYN+Ws+O/tnV1XdmlH2/6aLFY8srQ2QxC4RIBJMJ3ns+O/tnV1XdmYH+96BLFcO:QN6Z/RVaHcY4iJpZ/RV3HGO+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Razer.exe

Files

Razer.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\aural\OneDrive\Desktop\krnl.place\Razer\Razer\obj\Debug\Razer.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 232KB - Virtual size: 231KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ