RobloxCheatInjector[.]zip | Triage

Sharing

General

Target

RobloxCheatInjector.zip
Size

119KB
MD5

e92fdf0f69ea6661f7a8d655428e6443
SHA1

651e7453f0a6652834aa2893fb4b6ce227f6fc56
SHA256

67770a3640605add46ae76884ab1127b7ce378ee9c3d2f07425538bf794e6ec6
SHA512

bd953a1cb5b18fa1a19d19716295476c717edbbb29e6fba06415af8dfb99f298bd2e9b7f7104f2b8613e690fce0dbe90df5ab34c6d9169481db8303b41e8f175
SSDEEP

3072:O511HAGXhAul3cd/bzktNGT2gQNrbwPUeC8F6:O5PRAD84T2gQNrbezCt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs
Checks for missing Authenticode signature.

Processes:

resource

unpack001/RobloxCheatInjector.exe

Files

RobloxCheatInjector.zip
.zip
RobloxCheatInjector.exe
.exe windows:5 windows x86 arch:x86

4e06c011d59529bff8e1f1c88254b928

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_mbsstr
memset
_mbsnbcpy

Sections

.text
Size: 114KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 1024B - Virtual size: 864B

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ