RobloxPlayerBeta[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

RobloxPlayerBeta.dll
Size

20KB
MD5

71591d0e5e028b8dd3e36327cc8a336d
SHA1

970ee4c1c6187ce97930ce81863f708be6f36a42
SHA256

1e93fe78c59160515e35c3fa7059ec23181f54c52cb59a3d4709d980e9ce5775
SHA512

f75137420c4e7bb2a2f02e1fb5f001dd033245e0a1158df95eaa5a4c733b88d3701a01aaaf17a08db8ab0da2cf42c7ed9399c4cdcc4fb632f2887937e958d2c7
SSDEEP

192:EGOxfnVU3MwlRvQFSD1DhN15bk0hTe8t9CVazmwrXANtl8WXga5cNwj:QhnVOXLQF6bX5bt9TmJX9La

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RobloxPlayerBeta.dll

Files

RobloxPlayerBeta.dll
.dll windows:6 windows x64 arch:x64

0fb0be70216f863c5af453ebc04788f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\bartl\source\repos\Dll1\x64\Release\ByfroniumBypassium.pdb

Imports

kernel32

LoadLibraryA
GetProcAddress
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
RtlCaptureContext
GetSystemTimeAsFileTime
InitializeSListHead

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

ntdll

ZwRaiseHardError

vcruntime140

__C_specific_handler
__std_exception_copy
_CxxThrowException
__std_exception_destroy
__std_type_info_destroy_list
memcpy
memset

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment

api-ms-win-crt-convert-l1-1-0

mbstowcs

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh

Exports

Exports

run

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 660B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0fb0be70216f863c5af453ebc04788f2

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

ntdll

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 660B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 80B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 660B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 80B