RobloxPlayerBeta_Decrypted[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

RobloxPlayerBeta_Decrypted.exe
Size

103.1MB
MD5

2c1b922e020ff77d7fb507c0c6a5840a
SHA1

6d7821554e0c971d0ab8a4114afe7a4c7342ed9e
SHA256

df253c7ce37430307386e6ca4eeeb6f850628c09c5bfad58348fc43b49964a85
SHA512

f9b48d30e214f2621a829e379abdb1388dae55954cc022cf8804c01ebb4fe84cd7f93d9353e103e22384528cd60e4ed5021c8d383d976c5c3b7cec289bdf2528
SSDEEP

786432:ZmsTQ633xjfCPIt2BKw+CX3l/dKYxPIUJvjn6qXFQ2Y:ZtfCP6MX+CXVjxgUx64FQ2Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RobloxPlayerBeta_Decrypted.exe

Files

RobloxPlayerBeta_Decrypted.exe
.exe windows:6 windows x64 arch:x64

5f2225c9957477e25a941670ca0d629e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

robloxplayerbeta

run

Exports

Exports

?generic_category@system@boost@@YAAEBVerror_category@12@XZ
?system_category@system@boost@@YAAEBVerror_category@12@XZ
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement

Sections

.text
Size: 56.4MB - Virtual size: 56.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18.9MB - Virtual size: 18.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4.1MB - Virtual size: 20.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

CPADinfo
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 4.7MB - Virtual size: 4.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 639KB - Virtual size: 639KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.acedia
Size: 1024B - Virtual size: 662B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

5f2225c9957477e25a941670ca0d629e

Headers

DLL Characteristics

File Characteristics

Imports

robloxplayerbeta

Exports

Exports

Sections

.text Size: 56.4MB - Virtual size: 56.4MB

.rodata Size: 2KB - Virtual size: 2KB

.rdata Size: 18.9MB - Virtual size: 18.9MB

.data Size: 4.1MB - Virtual size: 20.3MB

.pdata Size: 1.9MB - Virtual size: 1.9MB

CPADinfo Size: 512B - Virtual size: 56B

_RDATA Size: 41KB - Virtual size: 41KB

.vmp0 Size: 4.7MB - Virtual size: 4.7MB

.rsrc Size: 152KB - Virtual size: 152KB

.reloc Size: 639KB - Virtual size: 639KB

.acedia Size: 1024B - Virtual size: 662B

.text
Size: 56.4MB - Virtual size: 56.4MB

.rodata
Size: 2KB - Virtual size: 2KB

.rdata
Size: 18.9MB - Virtual size: 18.9MB

.data
Size: 4.1MB - Virtual size: 20.3MB

.pdata
Size: 1.9MB - Virtual size: 1.9MB

CPADinfo
Size: 512B - Virtual size: 56B

_RDATA
Size: 41KB - Virtual size: 41KB

.vmp0
Size: 4.7MB - Virtual size: 4.7MB

.rsrc
Size: 152KB - Virtual size: 152KB

.reloc
Size: 639KB - Virtual size: 639KB

.acedia
Size: 1024B - Virtual size: 662B