Static task
static1
Behavioral task
behavioral1
Sample
rooming list.exe
Resource
win7-20230220-en
General
-
Target
88621ae4a26129a6043d8ce76550b766840784af1516b45d7cafefb4a8a85c16.zip
-
Size
529KB
-
MD5
f83f41de20061fdf7084a31a07fc81f8
-
SHA1
fd01fc855a3d23259fcc0c13d857c013772ef5e5
-
SHA256
24c703c4dd50f019ecc8d261702a339ea8bb5f83d8187228ea561a320568c9a7
-
SHA512
ed59f0eda751b55f12b6cdcd706fc98cceba2f13816ac0278d4a8f59e6409e2ab4fa583da52984a2d1c6a7ea97c4c7d5dd7eeee6d28c674237340ee682cabd45
-
SSDEEP
12288:MqKQ4gRU1Loih2C271ug5EEddDPZySRCf6XfJDf6:MqKcmc3Cez53rRC0fJDf6
Malware Config
Signatures
Files
-
88621ae4a26129a6043d8ce76550b766840784af1516b45d7cafefb4a8a85c16.zip.zip
Password: infected
-
88621ae4a26129a6043d8ce76550b766840784af1516b45d7cafefb4a8a85c16.7z.rar
Password: infected
-
rooming list.exe.exe windows x86
Password: infected
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 522KB - Virtual size: 521KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 185KB - Virtual size: 184KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ