UPDATED-How-To-Make-A-ROBLOX-Executor-Explo_563284[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
UPDATED-How-To-Make-A-ROBLOX-Executor-Explo_563284.exe
Size 7.7MB
Sample240708-t71naa1bmb
SHA256 eb297d94f117cc0f9570678597868a5ac72c19a333b7c3673484e5713cb1d0f7
MD5 452d6fd403d1d7f958a4a772038ee03f
SHA1 aa9e5b1ae03cfaf13f5941bcd6ed62752d5b142f
SHA512 0dd6ab04a7cdb5e0713df3d955d24b956fb1933be476b70dc2fc9759ad4c014e642d903dc4165994c45dca22bea47ea34cf367286dc93d16ea9caf62b9fde188
SSDEEP 196608:c288p8RT3OgtMwVajd4nXhE7OUGCZvb+CV4i8JRzY6SKT:c288+T3O6I2nXhE7OUGClb+CV4vDP
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
UPDATED-How-To-Make-A-ROBLOX-Executor-Explo_563284.exe

File Explorer

UPDATED-How-To-Make-A-ROBLOX-Executor-Explo_563284.exe

.exe 7.7MB

UPDATED-How-To-Make-A-ROBLOX-Executor-Explo_563284.exe

IMPHASH 3edeaff8abef40c004b6f29fa270bade
SHA256 eb297d94f117cc0f9570678597868a5ac72c19a333b7c3673484e5713cb1d0f7
MD5 452d6fd403d1d7f958a4a772038ee03f
SHA1 aa9e5b1ae03cfaf13f5941bcd6ed62752d5b142f
SHA512 0dd6ab04a7cdb5e0713df3d955d24b956fb1933be476b70dc2fc9759ad4c014e642d903dc4165994c45dca22bea47ea34cf367286dc93d16ea9caf62b9fde188
SSDEEP 196608:c288p8RT3OgtMwVajd4nXhE7OUGCZvb+CV4i8JRzY6SKT:c288+T3O6I2nXhE7OUGClb+CV4vDP
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

1234

Minor OS version

Major OS version

Entry point

1171084

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetStartupInfoW LCMapStringW SetStdHandle FindClose VirtualAlloc TlsFree GetTickCount SetEvent MoveFileExW EnterCriticalSection CreateFileW GetCurrentDirectoryA GetProcessAffinityMask FindFirstFileW SetLastError GetProcAddress FindNextFileW SetFileAttributesW GetSystemDirectoryW GetModuleHandleW HeapReAlloc FormatMessageW SetCurrentDirectoryW RemoveDirectoryA FreeEnvironmentStringsW GetFileSize UnhandledExceptionFilter LoadLibraryA ReadFile WideCharToMultiByte WakeAllConditionVariable FreeLibraryAndExitThread GetTempPathW WriteConsoleW GetACP ReleaseSemaphore TryAcquireSRWLockExclusive HeapAlloc SetFilePointerEx CreateThread TlsSetValue GetCurrentThreadId LocalFree WaitForSingleObject GetSystemInfo IsProcessorFeaturePresent GetVersionExA TlsGetValue LeaveCriticalSection FindNextFileA GlobalMemoryStatus CloseHandle CreateDirectoryA GetFileType CreateFileA VirtualFree HeapSize GetCurrentDirectoryW GetCurrentProcess RaiseException FindFirstFileA GetModuleFileNameW IsDebuggerPresent QueryPerformanceFrequency GetEnvironmentStringsW LoadLibraryExW SetCurrentDirectoryA DeleteCriticalSection GetProcessHeap GetModuleFileNameA GetCPInfo CreateSemaphoreA GetCommandLineA SetUnhandledExceptionFilter FreeLibrary GetConsoleMode RemoveDirectoryW RtlUnwind GetFileAttributesA AcquireSRWLockExclusive GetFileInformationByHandle DeleteFileW FlushFileBuffers GetTickCount64 FindFirstFileExA SetFilePointer GetLastError QueryPerformanceCounter GetModuleHandleA EncodePointer InitializeCriticalSection GetCurrentProcessId LoadLibraryW SetFileAttributesA AreFileApisANSI DecodePointer GetModuleHandleExW SetFileTime CreateEventA CreateDirectoryW CreateProcessA SetEndOfFile ExitProcess ResetEvent IsBadReadPtr DeleteFileA IsValidCodePage GetTempPathA ReleaseSRWLockExclusive GetSystemTimeAsFileTime TerminateProcess InitializeCriticalSectionEx GetFileAttributesW HeapFree GetTempFileNameW FormatMessageA Sleep GetOEMCP WriteFile GetStdHandle GetVersion GetCommandLineW TlsAlloc GetConsoleCP GetStringTypeW MultiByteToWideChar InitializeSListHead ExitThread InitializeCriticalSectionAndSpinCount

user32

DialogBoxParamA CharUpperW LoadStringA LoadIconA SetWindowTextA CharUpperA KillTimer GetDlgItem DialogBoxParamW EndDialog MessageBoxA GetWindowLongA SetTimer ShowWindow LoadStringW SetWindowLongA MessageBoxW SendMessageA PostMessageA DestroyWindow SetWindowTextW

shell32

ShellExecuteExA

oleaut32

VariantClear SysAllocStringLen SysStringLen

advapi32

CloseServiceHandle