C:\Users\host\Desktop\RobloxHwidTool\obj\Debug\RobloxHwidTool.pdb
Static task
static1
General
-
Target
HWIDtool.zip
-
Size
49KB
-
MD5
746f642867701e49490d110e648f008e
-
SHA1
51cd2610cb9cfa05d2efd3c9fd08aa29b32d21f8
-
SHA256
3a9784b5b328a331033649f6a5efdeec0f6da27f2baf55d902ed2c6a385f2bdb
-
SHA512
2583ce38fe9aea6b092759f6b58b6c934212de28ac8e6c659b9ec40fbbfa969880b70f49097cd22a76e5d89a257b2b6ad511f3215f68ec2e99fd195769e06336
-
SSDEEP
1536:J19SfU5WJNA7Q5gDOf4OuLXGZ4o2+G+aNJt4T:396JNA7Q5gDOf4lLX+PaNJt4T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/HWIDtool/RobloxHwidTool.exe
Files
-
HWIDtool.zip.zip
-
HWIDtool/RobloxHwidTool.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
mscoree
_CorExeMain
Sections
.text Size: 170KB - Virtual size: 170KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
HWIDtool/d3d9.dll