Room Vouchers[.]7z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Room Vouchers.7z
Size

536KB
MD5

1098597c3e1fdbee537acc3a2493296b
SHA1

f5008149e57c3ac0d74e596443cb0cd32df617cc
SHA256

f27df30c935d30d292d87c2217df57749eeb5c1b75dae3a0a58d52c15cc8e54a
SHA512

2e4b99aa211ad9d3af0372ea3d768c7d34bf17995b33ed83430ee4abe332a293fda2edf234a59a0e70b8429368886804239b317fa9a1ea1de81eed290cb0efc9
SSDEEP

12288:T0quVkRvYphS5MINcBs96KAB/68FSVtb20r2:TeVu4hgVAB/+tbtK

Score

1^/10

Malware Config

Signatures

Files

Room Vouchers.7z
.rar
Room Vouchers.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 506KB - Virtual size: 505KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ