Behavioral task
behavioral1
Sample
acreusxroblox.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral2
Sample
2 �.pyc
Resource
win10v2004-20231215-en
General
-
Target
acreusxroblox.exe
-
Size
113.3MB
-
MD5
b0e360edb0683b68c3df154b7cdf2c96
-
SHA1
e6dbe0eb0c282554c0486bd00361d60ec1ad8aa7
-
SHA256
540687aa2204b545bdf306fc13dd29d06a08fec46eb56840ecf9d830fff8dbd8
-
SHA512
2bca132fade8affa04aaafbaeb2acc11eeae20cd482a8d26af34f2f7583e30b9177863755f8a69b145ee3f311f6de41a521f904f3d4452e370fa8193ab386ce4
-
SSDEEP
3145728:WgYRPSC++6y9JidL/t/VG6RmtCRlGPrFec2qHO5iw8zv2z9rAq:WxaC4y9Kj5mERluosHCiLv2Bl
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acreusxroblox.exe
Files
-
acreusxroblox.exe.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 224KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 126KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 61KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
2 �.pyc