Behavioral task
behavioral1
Sample
ROBLOX.exe
Resource
win7-20240705-en
General
-
Target
ROBLOX.exe
-
Size
923KB
-
MD5
597c7486fccf32f369fb13dd3a175a9b
-
SHA1
e585967d5a1013f3c123c8bdc34db294fef4c045
-
SHA256
d12bf62c7d7e1379cf6460cf18856bfc6821038c8a9c8fd6fd787bbf794fd456
-
SHA512
9546a3b976af08963eb68ae3f9fc5de9cf2ed009a64b3c912e10ad063137657fd1bb26f700af8a283834d84b9e1bed65afc3f1fb32c4c118fcc41f57980ce29a
-
SSDEEP
24576:GMbB3HG2hiAPP9xQTEdu7/ImmD7SOUgX/l4LY9cUs:GI3VzPP9xQI87qD73UgPSs7s
Malware Config
Signatures
-
resource yara_rule sample upx -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ROBLOX.exe
Files
-
ROBLOX.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
UPX0 Size: - Virtual size: 80KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
UPX1 Size: 906KB - Virtual size: 908KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE