General

  • Target

    roexec.zip

  • Size

    91.6MB

  • MD5

    b4c774b5b4495ac679c22e1b54c6fa0a

  • SHA1

    f1817d4d643e381ad927ea9681a47e8aa0ac655c

  • SHA256

    72b678d1e56c50e3739059c33b597815f1162d4b143dabd4197665afdcb23686

  • SHA512

    7e3d25dccf4aa42ac26d1789ffb0493060f77352db55bc9f23778ac76c64c31a7c8e630cf44f5e6de0f108d6251b140ac8e78d4a821598b10e327428abad014c

  • SSDEEP

    1572864:wQNiMEE6JL55kKGRVizp3JP30PeI1IOCKIkyCDRmMdxpVGqu0B7Tk4T78/YsCI5q:wbSmnkNR+3JP2L2c9yIRmou05I43KKTh

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 21 IoCs

    Checks for missing Authenticode signature.

Files

  • roexec.zip
    .zip
  • roexec/7NcYO53qKZ.exe
    .exe windows:5 windows x64 arch:x64

    0b5552dccd9d0a834cea55c0c8fc05be


    Headers

    Imports

    Sections

  • creal.pyc
  • roexec/UI/CefSharp.BrowserSubprocess.Core.dll
    .dll windows:6 windows x86 arch:x86

    9aa55db327a746db6477d0095c197d16


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/CefSharp.BrowserSubprocess.Core.pdb
  • roexec/UI/CefSharp.BrowserSubprocess.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • roexec/UI/CefSharp.BrowserSubprocess.pdb
  • roexec/UI/CefSharp.Core.dll
    .dll windows:6 windows x86 arch:x86

    8efa962533b7413e8d856dd3563cf8e6


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/CefSharp.Core.pdb
  • roexec/UI/CefSharp.Core.xml
    .xml
  • roexec/UI/CefSharp.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/CefSharp.Wpf.pdb
  • roexec/UI/CefSharp.Wpf.xml
    .xml
  • roexec/UI/CefSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/CefSharp.pdb
  • roexec/UI/CefSharp.xml
    .xml
  • roexec/UI/EntityFramework.SqlServer.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • roexec/UI/EntityFramework.SqlServer.xml
    .xml
  • roexec/UI/EntityFramework.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • roexec/UI/EntityFramework.xml
    .xml
  • roexec/UI/GPUCache/data_0
  • roexec/UI/GPUCache/data_1
  • roexec/UI/GPUCache/data_2
  • roexec/UI/GPUCache/data_3
  • roexec/UI/GPUCache/index
  • roexec/UI/Newtonsoft.Json.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • roexec/UI/Newtonsoft.Json.xml
    .xml
  • roexec/UI/README.txt
  • roexec/UI/RestSharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/RestSharp.xml
    .xml
  • roexec/UI/Synapse UI WPF.application
  • roexec/UI/Synapse UI WPF.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • roexec/UI/Synapse UI WPF.exe.config
    .xml
  • roexec/UI/Synapse UI WPF.exe.manifest
  • roexec/UI/Synapse UI WPF.pdb
  • roexec/UI/System.Data.SQLite.EF6.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/System.Data.SQLite.Linq.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/System.Data.SQLite.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/System.Data.SQLite.dll.config
    .xml
  • roexec/UI/System.Data.SQLite.xml
    .xml .js polyglot
  • roexec/UI/auth/options.bin
  • roexec/UI/auth/token.bin
  • roexec/UI/auth/trustcache.bin
  • roexec/UI/bin/Monaco.html
    .html .js polyglot
  • roexec/UI/bin/ace/ace.js
    .js
  • roexec/UI/bin/ace/ext-beautify.js
    .js
  • roexec/UI/bin/ace/ext-code_lens.js
    .js
  • roexec/UI/bin/ace/ext-elastic_tabstops_lite.js
    .js
  • roexec/UI/bin/ace/ext-emmet.js
    .js
  • roexec/UI/bin/ace/ext-error_marker.js
    .js
  • roexec/UI/bin/ace/ext-keybinding_menu.js
    .js
  • roexec/UI/bin/ace/ext-language_tools.js
    .js
  • roexec/UI/bin/ace/ext-linking.js
    .js
  • roexec/UI/bin/ace/ext-modelist.js
    .js
  • roexec/UI/bin/ace/ext-options.js
    .js
  • roexec/UI/bin/ace/ext-prompt.js
    .js
  • roexec/UI/bin/ace/ext-rtl.js
    .js
  • roexec/UI/bin/ace/ext-searchbox.js
    .js
  • roexec/UI/bin/ace/ext-settings_menu.js
    .js
  • roexec/UI/bin/ace/ext-spellcheck.js
    .js
  • roexec/UI/bin/ace/ext-split.js
    .js
  • roexec/UI/bin/ace/ext-static_highlight.js
    .js
  • roexec/UI/bin/ace/ext-statusbar.js
    .js
  • roexec/UI/bin/ace/ext-textarea.js
    .js
  • roexec/UI/bin/ace/ext-themelist.js
    .js
  • roexec/UI/bin/ace/ext-whitespace.js
    .js
  • roexec/UI/bin/ace/keybinding-emacs.js
    .js
  • roexec/UI/bin/ace/keybinding-sublime.js
    .js
  • roexec/UI/bin/ace/keybinding-vim.js
    .js
  • roexec/UI/bin/ace/keybinding-vscode.js
    .js
  • roexec/UI/bin/ace/mode-lua.js
    .js
  • roexec/UI/bin/ace/snippets/lua.js
    .js
  • roexec/UI/bin/ace/theme-ambiance.js
    .js
  • roexec/UI/bin/ace/theme-chaos.js
    .js
  • roexec/UI/bin/ace/theme-chrome.js
    .js
  • roexec/UI/bin/ace/theme-clouds.js
    .js
  • roexec/UI/bin/ace/theme-clouds_midnight.js
    .js
  • roexec/UI/bin/ace/theme-cobalt.js
    .js
  • roexec/UI/bin/ace/theme-crimson_editor.js
    .js
  • roexec/UI/bin/ace/theme-dawn.js
    .js
  • roexec/UI/bin/ace/theme-dracula.js
    .js
  • roexec/UI/bin/ace/theme-dreamweaver.js
    .js
  • roexec/UI/bin/ace/theme-eclipse.js
    .js
  • roexec/UI/bin/ace/theme-github.js
    .js
  • roexec/UI/bin/ace/theme-gob.js
    .js
  • roexec/UI/bin/ace/theme-gruvbox.js
    .js
  • roexec/UI/bin/ace/theme-idle_fingers.js
    .js
  • roexec/UI/bin/ace/theme-iplastic.js
    .js
  • roexec/UI/bin/ace/theme-katzenmilch.js
    .js
  • roexec/UI/bin/ace/theme-kr_theme.js
    .js
  • roexec/UI/bin/ace/theme-kuroir.js
    .js
  • roexec/UI/bin/ace/theme-merbivore.js
    .js
  • roexec/UI/bin/ace/theme-merbivore_soft.js
    .js
  • roexec/UI/bin/ace/theme-mono_industrial.js
    .js
  • roexec/UI/bin/ace/theme-monokai.js
    .js
  • roexec/UI/bin/ace/theme-nord_dark.js
    .js
  • roexec/UI/bin/ace/theme-pastel_on_dark.js
    .js
  • roexec/UI/bin/ace/theme-solarized_dark.js
    .js
  • roexec/UI/bin/ace/theme-solarized_light.js
    .js
  • roexec/UI/bin/ace/theme-sqlserver.js
    .js
  • roexec/UI/bin/ace/theme-terminal.js
    .js
  • roexec/UI/bin/ace/theme-textmate.js
    .js
  • roexec/UI/bin/ace/theme-tomorrow.js
    .js
  • roexec/UI/bin/ace/theme-tomorrow_night.js
    .js
  • roexec/UI/bin/ace/theme-tomorrow_night_blue.js
    .js
  • roexec/UI/bin/ace/theme-tomorrow_night_bright.js
    .js
  • roexec/UI/bin/ace/theme-tomorrow_night_eighties.js
    .js
  • roexec/UI/bin/ace/theme-twilight.js
    .js
  • roexec/UI/bin/ace/theme-vibrant_ink.js
    .js
  • roexec/UI/bin/ace/theme-xcode.js
    .js
  • roexec/UI/bin/ace/worker-lua.js
    .js
  • roexec/UI/bin/tabs/Tab 1.txt
  • roexec/UI/bin/theme-wpf.json
  • roexec/UI/bin/vs/base/worker/workerMain.js
    .js
  • roexec/UI/bin/vs/basic-languages/bat/bat.js
  • roexec/UI/bin/vs/basic-languages/coffee/coffee.js
  • roexec/UI/bin/vs/basic-languages/cpp/cpp.js
  • roexec/UI/bin/vs/basic-languages/csharp/csharp.js
  • roexec/UI/bin/vs/basic-languages/csp/csp.js
  • roexec/UI/bin/vs/basic-languages/css/css.js
  • roexec/UI/bin/vs/basic-languages/dockerfile/dockerfile.js
  • roexec/UI/bin/vs/basic-languages/fsharp/fsharp.js
  • roexec/UI/bin/vs/basic-languages/go/go.js
  • roexec/UI/bin/vs/basic-languages/handlebars/handlebars.js
    .js
  • roexec/UI/bin/vs/basic-languages/html/html.js
    .js
  • roexec/UI/bin/vs/basic-languages/ini/ini.js
  • roexec/UI/bin/vs/basic-languages/java/java.js
  • roexec/UI/bin/vs/basic-languages/less/less.js
  • roexec/UI/bin/vs/basic-languages/lua/lua.js
  • roexec/UI/bin/vs/basic-languages/markdown/markdown.js
    .js
  • roexec/UI/bin/vs/basic-languages/msdax/msdax.js
  • roexec/UI/bin/vs/basic-languages/mysql/mysql.js
  • roexec/UI/bin/vs/basic-languages/objective-c/objective-c.js
  • roexec/UI/bin/vs/basic-languages/pgsql/pgsql.js
  • roexec/UI/bin/vs/basic-languages/php/php.js
  • roexec/UI/bin/vs/basic-languages/postiats/postiats.js
  • roexec/UI/bin/vs/basic-languages/powershell/powershell.js
  • roexec/UI/bin/vs/basic-languages/pug/pug.js
  • roexec/UI/bin/vs/basic-languages/python/python.js
  • roexec/UI/bin/vs/basic-languages/r/r.js
  • roexec/UI/bin/vs/basic-languages/razor/razor.js
    .js
  • roexec/UI/bin/vs/basic-languages/redis/redis.js
  • roexec/UI/bin/vs/basic-languages/redshift/redshift.js
  • roexec/UI/bin/vs/basic-languages/ruby/ruby.js
  • roexec/UI/bin/vs/basic-languages/rust/rust.js
  • roexec/UI/bin/vs/basic-languages/sb/sb.js
  • roexec/UI/bin/vs/basic-languages/scss/scss.js
  • roexec/UI/bin/vs/basic-languages/solidity/solidity.js
  • roexec/UI/bin/vs/basic-languages/sql/sql.js
  • roexec/UI/bin/vs/basic-languages/st/st.js
  • roexec/UI/bin/vs/basic-languages/swift/swift.js
  • roexec/UI/bin/vs/basic-languages/vb/vb.js
  • roexec/UI/bin/vs/basic-languages/xml/xml.js
  • roexec/UI/bin/vs/basic-languages/yaml/yaml.js
  • roexec/UI/bin/vs/editor/contrib/suggest/media/String_16x.svg
  • roexec/UI/bin/vs/editor/contrib/suggest/media/String_inverse_16x.svg
  • roexec/UI/bin/vs/editor/editor.main.css
  • roexec/UI/bin/vs/editor/editor.main.js
    .js
  • roexec/UI/bin/vs/editor/editor.main.nls.de.js
  • roexec/UI/bin/vs/editor/editor.main.nls.es.js
  • roexec/UI/bin/vs/editor/editor.main.nls.fr.js
  • roexec/UI/bin/vs/editor/editor.main.nls.it.js
  • roexec/UI/bin/vs/editor/editor.main.nls.ja.js
  • roexec/UI/bin/vs/editor/editor.main.nls.js
  • roexec/UI/bin/vs/editor/editor.main.nls.ko.js
  • roexec/UI/bin/vs/editor/editor.main.nls.ru.js
  • roexec/UI/bin/vs/editor/editor.main.nls.zh-cn.js
  • roexec/UI/bin/vs/editor/editor.main.nls.zh-tw.js
  • roexec/UI/bin/vs/editor/standalone/browser/quickOpen/symbol-sprite.svg
  • roexec/UI/bin/vs/language/css/cssMode.js
    .js
  • roexec/UI/bin/vs/language/css/cssWorker.js
    .js
  • roexec/UI/bin/vs/language/html/htmlMode.js
    .js
  • roexec/UI/bin/vs/language/html/htmlWorker.js
    .js
  • roexec/UI/bin/vs/language/json/jsonMode.js
    .js
  • roexec/UI/bin/vs/language/json/jsonWorker.js
    .js
  • roexec/UI/bin/vs/language/typescript/lib/typescriptServices.js
    .js
  • roexec/UI/bin/vs/language/typescript/tsMode.js
    .js
  • roexec/UI/bin/vs/language/typescript/tsWorker.js
    .js
  • roexec/UI/bin/vs/loader.js
    .js
  • roexec/UI/cef.pak
    .js
  • roexec/UI/cef_100_percent.pak
    .js
  • roexec/UI/cef_200_percent.pak
    .js
  • roexec/UI/cef_extensions.pak
    .js
  • roexec/UI/chrome_elf.dll
    .dll windows:5 windows x86 arch:x86

    09abe0e5845e2bc9356f8da79693d828


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/d3dcompiler_47.dll
    .dll windows:10 windows x86 arch:x86

    0f31485cd3d6d36b416b744fa9701f28


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • roexec/UI/debug.log
  • roexec/UI/devtools_resources.pak
    .js
  • roexec/UI/dnlib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/dnlib.xml
    .xml
  • roexec/UI/icudtl.dat
  • roexec/UI/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    9cd91ca06d66ac9bd6138e143ee51c0a


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    3ae3956ab1353e92ed1a21ca2229382b


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/libcef.dll
    .dll windows:5 windows x86 arch:x86

    9eb28d3bb08a01edf1cc482733339dd1


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/locales/am.pak
  • roexec/UI/locales/ar.pak
  • roexec/UI/locales/bg.pak
  • roexec/UI/locales/bn.pak
  • roexec/UI/locales/ca.pak
  • roexec/UI/locales/cs.pak
  • roexec/UI/locales/da.pak
  • roexec/UI/locales/de.pak
  • roexec/UI/locales/el.pak
  • roexec/UI/locales/en-GB.pak
  • roexec/UI/locales/en-US.pak
  • roexec/UI/locales/es-419.pak
  • roexec/UI/locales/es.pak
  • roexec/UI/locales/et.pak
  • roexec/UI/locales/fa.pak
  • roexec/UI/locales/fi.pak
  • roexec/UI/locales/fil.pak
  • roexec/UI/locales/fr.pak
  • roexec/UI/locales/gu.pak
  • roexec/UI/locales/he.pak
  • roexec/UI/locales/hi.pak
  • roexec/UI/locales/hr.pak
  • roexec/UI/locales/hu.pak
  • roexec/UI/locales/id.pak
  • roexec/UI/locales/it.pak
  • roexec/UI/locales/ja.pak
  • roexec/UI/locales/kn.pak
  • roexec/UI/locales/ko.pak
  • roexec/UI/locales/lt.pak
  • roexec/UI/locales/lv.pak
  • roexec/UI/locales/ml.pak
  • roexec/UI/locales/mr.pak
  • roexec/UI/locales/ms.pak
  • roexec/UI/locales/nb.pak
  • roexec/UI/locales/nl.pak
  • roexec/UI/locales/pl.pak
  • roexec/UI/locales/pt-BR.pak
  • roexec/UI/locales/pt-PT.pak
  • roexec/UI/locales/ro.pak
  • roexec/UI/locales/ru.pak
  • roexec/UI/locales/sk.pak
  • roexec/UI/locales/sl.pak
  • roexec/UI/locales/sr.pak
  • roexec/UI/locales/sv.pak
  • roexec/UI/locales/sw.pak
  • roexec/UI/locales/ta.pak
  • roexec/UI/locales/te.pak
  • roexec/UI/locales/th.pak
  • roexec/UI/locales/tr.pak
  • roexec/UI/locales/uk.pak
  • roexec/UI/locales/vi.pak
  • roexec/UI/locales/zh-CN.pak
  • roexec/UI/locales/zh-TW.pak
  • roexec/UI/natives_blob.bin
    .js
  • roexec/UI/snapshot_blob.bin
  • roexec/UI/swiftshader/libEGL.dll
    .dll windows:5 windows x86 arch:x86

    a2d6ede52e4333ca5341c109f2c1e2f0


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/swiftshader/libGLESv2.dll
    .dll windows:5 windows x86 arch:x86

    53c8767b6210042cfdad8536c9a7d78d


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/v8_context_snapshot.bin
  • roexec/UI/websocket-sharp.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • roexec/UI/websocket-sharp.xml
    .xml
  • roexec/UI/x64/SQLite.Interop.dll
    .dll windows:6 windows x64 arch:x64

    8b65b647278c90a91a98d2cac8dfa8b1


    Headers

    Imports

    Exports

    Sections

  • roexec/UI/x86/SQLite.Interop.dll
    .dll windows:6 windows x86 arch:x86

    4cb59043491b2ca536e3ce19189f4918


    Headers

    Imports

    Exports

    Sections