Roblox_Blue[.]rar | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Roblox_Blue.rar
Size

6KB
MD5

132281bae530575fd0e3741813b61666
SHA1

ecde4a0bec873151402f2d40fd926bc3288c15ae
SHA256

907bae589dc99317310cd4670321fd6568434e013fb5a2e02e93ca4d84db5bf2
SHA512

e63ebd2fa8370cc70fb460911e6a0fe364573bb845da39c72661b5044e3975befa7d680fee2b12b5da38d62b9f6de16ed91be7689fb4c521f6bcfb9650d74801
SSDEEP

192:YYWV+9+g18/AAXo37+GcqDJdbPMTDG0wzo7tFSDtRHAR:h+g1qALL+xqD/bPgczo7tFShiR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Roblox Blue.exe

Files

Roblox_Blue.rar
.rar
Roblox Blue.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\maxki\source\repos\Roblox Blue\Roblox Blue\obj\Release\Roblox Blue.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ