rbxfpsunlocker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

rbxfpsunlocker.exe
Size

418KB
MD5

d8f62c2fb70fc556231ad0f19d74c701
SHA1

c8136fc9eaf99b0b8de0e03e7d7e227f8ed41cf2
SHA256

77b09fdd0b43a407f40f5ea1d86bdfd1c0863cf13608f2750fc25d5665417530
SHA512

59f817630d2f9518f545523beb15e29f36ec79b64cc4d98c86ce06fb4523cd0f2fc1c7198ddf2f43292afbf7a53e1940071fb54fa7c169adf9eca081c00fd3c5
SSDEEP

6144:Zo+XBN20NKf1C5wPgH4bM1r6Zp8VE58TePlQZsOmug:lXNEngvMcTePlQZsJug

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rbxfpsunlocker.exe

Files

rbxfpsunlocker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

>.wgZ 9
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 101KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

KF9F0D45
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ