Roblox Beamer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Roblox Beamer.exe
Size

5.6MB
MD5

619952ab5b1b2412181687a53d827aeb
SHA1

b2caae4077a9136d74e425d9e7e2c32f50565222
SHA256

4f1fee86ee221ca06a7aeea0d0811a43eb7178d898d7269e9cbd0c0bdc00113c
SHA512

77ed10ef4706a7f5eb98d0069fd5833cd9ae6bdd2e84c97fb6e19efc724b4cabd8e9cd1d2eca3ded99a28eb119b3149bf96e67d0454d5b051a2cf3ef3fe91281
SSDEEP

49152:J80sD1XH9Yb8wdOoGaWhh+/tyhOz9GvFfQofF9E+b6YejozCseAZ4y46+2pesi4j:V8SH3XpzNu3ehqhP+3D

Score

N/A

Malware Config

Signatures

Files

Roblox Beamer.exe
.exe windows x64

90bf3743bffb46add0ea03d9edad10d4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

secur32

AcquireCredentialsHandleA
FreeCredentialsHandle
ApplyControlToken
DeleteSecurityContext
DecryptMessage
FreeContextBuffer
AcceptSecurityContext
InitializeSecurityContextW
QueryContextAttributesW
EncryptMessage

kernel32

IsProcessorFeaturePresent
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteConsoleW
GetSystemTimeAsFileTime
TlsSetValue
CloseHandle
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetComputerNameExW
GetProcAddress
Sleep
GetModuleHandleA
RtlVirtualUnwind
TryAcquireSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockShared
SleepConditionVariableSRW
GetSystemInfo
SetHandleInformation
GetCurrentProcessId
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SetFileCompletionNotificationModes
FreeEnvironmentStringsW
ReleaseMutex
FindClose
CompareStringOrdinal
GetLastError
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
GetEnvironmentVariableW
DuplicateHandle
SetFilePointerEx
GetStdHandle
WriteFileEx
SleepEx
ReadFileEx
WaitForSingleObject
TerminateProcess
QueryPerformanceCounter
WakeAllConditionVariable
WakeConditionVariable
QueryPerformanceFrequency
HeapAlloc
GetProcessHeap
HeapFree
HeapReAlloc
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
CreateFileW
GetFileInformationByHandle
GetFileInformationByHandleEx
FindFirstFileW
GetFinalPathNameByHandleW
GetConsoleMode
GetModuleHandleW
FormatMessageW
GetModuleFileNameW
ExitProcess
GetFullPathNameW
CreateNamedPipeW
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
CreateThread
TlsGetValue
GetCurrentThreadId

advapi32

RegQueryValueExW
RegOpenKeyExW
GetUserNameW
SystemFunction036
RegCloseKey

ws2_32

WSAStartup
WSACleanup
WSAGetLastError
freeaddrinfo
getaddrinfo
WSAIoctl
setsockopt
WSASend
send
recv
shutdown
getsockopt
ioctlsocket
connect
bind
WSASocketW
getsockname
getpeername
closesocket

crypt32

CertDuplicateCertificateContext
CertFreeCertificateContext
CertOpenStore
CertAddCertificateContextToStore
CertGetCertificateChain
CertEnumCertificatesInStore
CertDuplicateCertificateChain
CertFreeCertificateChain
CertVerifyCertificateChainPolicy
CertCloseStore
CertDuplicateStore

ntdll

NtDeviceIoControlFile
NtCancelIoFileEx
NtCreateFile
RtlNtStatusToDosError

bcrypt

BCryptOpenAlgorithmProvider
BCryptGenRandom
BCryptCloseAlgorithmProvider

vcruntime140

memmove
memcmp
memset
memcpy
__current_exception_context
_CxxThrowException
__C_specific_handler
__current_exception
__CxxFrameHandler3

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
exit
_get_initial_narrow_environment
_c_exit
__p___argc
_set_app_type
_initialize_narrow_environment
_register_thread_local_exe_atexit_callback
_exit
__p___argv
_seh_filter_exe
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_cexit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

Sections

.text
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 190KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

90bf3743bffb46add0ea03d9edad10d4

Headers

DLL Characteristics

File Characteristics

Imports

secur32

kernel32

advapi32

ws2_32

crypt32

ntdll

bcrypt

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 3.7MB - Virtual size: 3.7MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 12KB - Virtual size: 14KB

.pdata Size: 190KB - Virtual size: 190KB

.rsrc Size: 1024B - Virtual size: 520B

.reloc Size: 34KB - Virtual size: 34KB

.text
Size: 3.7MB - Virtual size: 3.7MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 12KB - Virtual size: 14KB

.pdata
Size: 190KB - Virtual size: 190KB

.rsrc
Size: 1024B - Virtual size: 520B

.reloc
Size: 34KB - Virtual size: 34KB