Resubmissions

04-04-2024 23:11

240404-26nakada71 10

04-04-2024 23:10

240404-25rxcsda5z 10

General

  • Target

    ROBLOX MOD.zip

  • Size

    2.7MB

  • MD5

    b7b55881e07b35e7d0db149fa4824c02

  • SHA1

    fff61668cbe80d180d49b05858d65b07d5579428

  • SHA256

    d801058b8bdb1a799c725c7004852f62110335e3d48e6e6731f1a8e5b3a30f5a

  • SHA512

    18566cd88110e234dcc9473394f7d2c16a09afd1373053fea821b2dd8293bda115416d695f46ba3b4b140bb426c53d6a5e05c54928abe9928947350fbbbfd117

  • SSDEEP

    49152:3bT4cpgiAu1Ub5sGOnS1ArG0wU9zv9mdSlpLGiiKeymqwKw1r:3bii96knN9mdApLGi1XmZr

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ROBLOX MOD.zip
    .zip

    Password: 1234

  • ROBLOX MOD.exe
    .exe windows:4 windows x86 arch:x86

    Password: 1234

    f4639a0b3116c2cfc71144b88a929cfd


    Code Sign

    Headers

    Imports

    Sections

  • $INTERNET_CACHE/Discussions
  • $INTERNET_CACHE/Draft
  • $INTERNET_CACHE/Evening
  • $INTERNET_CACHE/Formal
  • $INTERNET_CACHE/Gender
  • $INTERNET_CACHE/Idaho
    .exe windows:5 windows x86 arch:x86

    Password: 1234


    Headers

    Sections

  • $INTERNET_CACHE/Integral
  • $INTERNET_CACHE/Richards
  • $INTERNET_CACHE/Robots
  • $INTERNET_CACHE/Rule
  • $INTERNET_CACHE/Shopping
  • $INTERNET_CACHE/Slideshow
  • $INTERNET_CACHE/Strip
  • $INTERNET_CACHE/Td
  • $INTERNET_CACHE/Th
  • dll/BaseEngine.ini
  • dll/roblox_api.dll
    .dll windows:5 windows x86 arch:x86

    Password: 1234

    5244871a7e6bf3a82e903bbb5da1d05f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • jks.pck