HWIDtool[.]zip | Triage™

General

Target
HWIDtool.zip
Size 49KB
Sample240613-chvbja1akb
SHA256 3a9784b5b328a331033649f6a5efdeec0f6da27f2baf55d902ed2c6a385f2bdb
MD5 746f642867701e49490d110e648f008e
SHA1 51cd2610cb9cfa05d2efd3c9fd08aa29b32d21f8
SHA512 2583ce38fe9aea6b092759f6b58b6c934212de28ac8e6c659b9ec40fbbfa969880b70f49097cd22a76e5d89a257b2b6ad511f3215f68ec2e99fd195769e06336
SSDEEP 1536:J19SfU5WJNA7Q5gDOf4OuLXGZ4o2+G+aNJt4T:396JNA7Q5gDOf4lLX+PaNJt4T
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/HWIDtool/RobloxHwidTool.exe

File Explorer

HWIDtool.zip

.zip 49KB
HWIDtool/RobloxHwidTool.exe

.exe 173KB
HWIDtool/d3d9.dll

11B

HWIDtool.zip

SHA256 3a9784b5b328a331033649f6a5efdeec0f6da27f2baf55d902ed2c6a385f2bdb
MD5 746f642867701e49490d110e648f008e
SHA1 51cd2610cb9cfa05d2efd3c9fd08aa29b32d21f8
SHA512 2583ce38fe9aea6b092759f6b58b6c934212de28ac8e6c659b9ec40fbbfa969880b70f49097cd22a76e5d89a257b2b6ad511f3215f68ec2e99fd195769e06336
SSDEEP 1536:J19SfU5WJNA7Q5gDOf4OuLXGZ4o2+G+aNJt4T:396JNA7Q5gDOf4lLX+PaNJt4T
MD5 SHA1 SHA512 SSDEEP

HWIDtool/RobloxHwidTool.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 9acb05b1c7458b49e2565fa5468fa0c82b7ae0ee65246c847ab1078b400c1834
MD5 721b23214a8d7cc0272480b9adadf84f
SHA1 f57378fc9e04ca685a21622cbb81d528d414a944
SHA512 c536bdd86c88b2dac13e9202c1d23359fe3adfc24a4080bc797fdef7e9603fab6bb82bb9588edbedd6dd31ab673f77b0d84f41dbc185cac01d8b819dd85c4c71
SSDEEP 3072:6Gjk1DVEI5Rhzypm5jxSbSpwtydacmLHLW5h5cwVdrVvZUyEPZzzVLX:PjmKCXZVBdyyEPZP1
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

182670

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\host\Desktop\RobloxHwidTool\obj\Debug\RobloxHwidTool.pdb

HWIDtool.zip

HWIDtool/RobloxHwidTool.exe

mscoree

dotnet

HWIDtool/d3d9.dll

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

HWIDtool.zip

HWIDtool/RobloxHwidTool.exe

mscoree

dotnet

HWIDtool/d3d9.dll