Overview

overview

8

Static

static

8

Recroom_Release.exe

windows10-ltsc_2021-x64

6

Sharing

Copy URL Twitter E-mail

General

  • Target
    Recroom_Release.exe
  • Size 787KB
  • Sample260707-a6evmsbx5l
  • SHA256 898c59daa518791dde69d4825c3ebf8698a29c66c308e2fa18280ccd29bc1685
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
revoked_codesign

Malware Config

Signatures

  • Revoked Certificate in Chain 1 IoCs

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign
  • Untrusted Codesign Signers 1 IoCs

    Codesigned file was signed by an untrusted entity.

File Explorer

  • Recroom_Release.exe
    .exe 787KB

Recroom_Release.exe

  • IMPHASH 272fcff0e8ff136538edf6b3ad54b1da
  • SHA256 898c59daa518791dde69d4825c3ebf8698a29c66c308e2fa18280ccd29bc1685
  • MD5 SHA1 SHA512 SSDEEP TLSH
windows:6windowsx64arch:x64

  • Revoked Certificate in Chain

    One or more certificates in the signing chain have been revoked, indicating potential compromise.

    revoked_codesign

  • Untrusted Codesign Signers

    Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest
ce:04:72:75:04:f9:20:b0:e6:2c:c9:a2:46:80:03:6e:c3:13:d1:77
Digest Algorithm
sha1
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=Micro-Star International CO.\, LTD.,O=Micro-Star International CO.\, LTD.,L=Zhonghe District,ST=New Taipei City,C=TW
Minor OS version
0
Major OS version
6
Entry point
143552
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths