Roominglist[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Roominglist.exe
Size

300.0MB
MD5

ade8f4b1da95ac943cbad0cbf5f38243
SHA1

03715632e3362410159f09661a4430963e6a9686
SHA256

a38d00e784514f68733a197f6a08ff9d13cb7a47b36470823eaf8b2a64b25483
SHA512

5b5a844c9c103ef747f07c0ff1acbd2fefc5506d975cc306aee5412b571ac98c0c05f8b2a8137ebb0bed2f8156f298616b4a61015b35dbdeabc67052e5a5ea66
SSDEEP

12288:VfyqsD/UO7iB15TJINXwvJg5uo82z5blGiims:5qU2iB15TJINXOJg5FRji

Score

1^/10

Malware Config

Signatures

Files

Roominglist.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 534KB - Virtual size: 533KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 181KB - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ