Static task
static1
Behavioral task
behavioral1
Sample
RobloxPlayerInstaller.exe
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
RobloxPlayerInstaller.exe
Resource
win10v2004-20240412-en
General
-
Target
RobloxPlayerInstaller.exe
-
Size
257KB
-
MD5
f301956d9ffd9335ac96c44589a76958
-
SHA1
b807f50826522f537a20f83023d2c1a4a05026fc
-
SHA256
ad949906b5a06422ff53a149ee4d56b1c48173161dfa2df9104e77a3dee529a2
-
SHA512
2dc042898172a0437728b9a20124d360957ce63bc7e149c7c5404aa6ef62ce442117108897d3e26f82fab0e660fb086f909bfbc8d5409cbd21874325dca147f7
-
SSDEEP
6144:urQdMTmP5GA6MpmDrq36xdtyZbKkL3oDnFE:ughY7MEDW36GekjoDn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RobloxPlayerInstaller.exe
Files
-
RobloxPlayerInstaller.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 174KB - Virtual size: 174KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 82KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ