Behavioral task
behavioral1
Sample
RobloxInstaller.exe
Resource
win10v2004-20240426-es
General
-
Target
RobloxInstaller.exe
-
Size
30.5MB
-
MD5
8fff6b474df42dcb7a2eca3124223dd2
-
SHA1
41422fdcae3a2d9511aef5173d65914ba026899e
-
SHA256
22e1907288f09e2a7890409fe450464ff1ab915fd0c955739b8340db1ec23b2e
-
SHA512
4a6d7831e3f4adc6923e495d8d0f3d2fe28e219fa4cfdb0e7217782f20b00016ad8750b385da57e368094855c329e43f914fa74a7f58ab005f96714344a4ad51
-
SSDEEP
786432:oQdbz8BOq9xN/iHQBJR6f960JZ6oRRvZZHOBOuiFWXBLAWuz0/:rd/iOqfJiHQBJo960JFRvZRv1Fw0z
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RobloxInstaller.exe
Files
-
RobloxInstaller.exe.exe windows:5 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
UPX0 Size: - Virtual size: 276KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 62KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
conection.pyc