Rzr La Parade exe Malware Generic File Malware Analysis: d434609ee7123c757a926cf031af411f
Gridinsoft Logo
File Icon

Rzr_La_Parade.exe Malware Generic Analysis

Updated 8 months ago
Checked by Malware Check
Rzr_La_Parade.exe

Technical Analysis

File Name Rzr_La_Parade.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.207.174
Database Version 2025-02-15 13:00:41 UTC
⚠

Malware.Win32.Generic.cld

Malware family: Generic

This detection name identifies suspicious files displaying Trojan-like behavior patterns. It represents malware that masquerades as benign programs while executing unauthorized activities on the infected system.
N/A
Detection Rate
10,080,768
File Size (bytes)
2025-02-15
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
d434609ee7123c757a926cf031af411f
SHA1
3fdbbc58415c87692c847709128f9ea6aef0e88d
SHA256
0c6c78e1cc2a640d1a578e023a91b018535b0718097d0ad55f123d9b7d36a0b9
SHA512
9d5e25807de3f9c83786b815de552551293e04ec6dd149eff66bd20aaa29288b17ea067e94761b04e5d3d461d63af38ae98b52223f65ddac4dbf9ae4356cd9ff
ImpHash
ebfda418b36a32d6289e99eef5240ac0

PE Analysis

Basic Information

▼
Icon
Hash: 848322efe4fc278ae2553d68e3f6d952
Fuzzy: 76f21e0c095e29daae265502beb2d533
dHash: b271c8cc969696b0
Image Base 0x00400000
Entry Point 0x0041164e
Compilation Time 2022-02-03 13:49:28
Checksum 0x00000000 (Actual: 0x009acdb0)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 12 libraries
Exports 0 functions
Resources 4 Resources
Sections 5 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 69,972 bytes 70,144 bytes 6.54 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0B240D71606CD62FBC8250FCC8F449CC
.rdata 0x00013000 328,962 bytes 329,216 bytes 3.44 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 77B9067F8A09FC2E8CA6F5BD96ECD454
.data 0x00064000 9,675,832 bytes 9,672,192 bytes 7.82 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 7B4041AE3979646CD85065F957409380
.rsrc 0x0099f000 4,312 bytes 4,608 bytes 2.22 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9738EA7153098FB4FB9579BA03E3011A
.reloc 0x009a1000 3,236 bytes 3,584 bytes 6.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 4AFC018A6D5ECF98B3E934FA8079C62B
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 4 (4,015 bytes)
Resource Type Count Total Size Percentage
RT_ICON 2 3,600 bytes
89.7%
RT_GROUP_ICON 1 34 bytes
0.8%
RT_MANIFEST 1 381 bytes
9.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win32.Generic.cld Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.Generic.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware