Overview

overview

7

Static

static

1

RobloxPlay...er.exe

windows7-x64

7

RobloxPlay...er.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    RobloxPlayerLauncher.exe
  • Size 5.0MB
  • Sample240303-atfleabb45
  • SHA256 f1c39623997dc5dc06d24f83e4accc4a36995b18c6ba7b9622b2bd07f3f2dbc4
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • RobloxPlayerLauncher.exe
    .exe 5.0MB

RobloxPlayerLauncher.exe

  • IMPHASH 20d51397109fde448b991ce5d423d797
  • SHA256 f1c39623997dc5dc06d24f83e4accc4a36995b18c6ba7b9622b2bd07f3f2dbc4
  • MD5 SHA1 SHA512 SSDEEP
windows:5windowsx86arch:x86
Digest
9a:0b:55:97:e1:0a:6a:1c:3a:a5:00:95:de:41:d1:d1:c7:f7:e7:a4:89:d8:a8:05:3c:01:e1:a1:37:41:65:32
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Digest
fe:30:74:ff:65:59:dd:3c:97:25:92:65:17:3b:ee:9c:f0:0e:46:18
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Minor OS version
1
Major OS version
5
Entry point
3342786
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\buildAgent\work\ci_deploy_nbsninja_boot-x86_git\build.ninja\common\vs2019\x86\release\Installer\BootstrapperClient\BootstrapperClient.pdb