Debug[.]zip | Triage

Sharing

General

Target

Debug.zip
Size

8KB
MD5

b5f9af4f9e31d96cb5695d211a4d41ab
SHA1

b452add04dea9506bf920118a1448dcfb5c3c0a6
SHA256

848d658782a066df797d183f8503b1a106e0db9d95875844dc7a35b66ebc640d
SHA512

79e3617c8e9c4b2ab9eb97456667dade9039bba72fb2143277fca1449f6d80a22ebfea19502f7c366f60ea88f06180fa4ddd8ae9dffa6fd149e4c1405e8b892a
SSDEEP

192:NBjvG0AvHycPnaPGFIDXRUrWcKEzZjlFqBqxCNtdXN4:nzG00ycPnaPGFIr6aHEpjNA/XK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Debug/toddlerkick_interface.exe

Files

Debug.zip
.zip
Debug/toddlerkick_interface.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\locsucc\Downloads\Compressed\roblox-base-main\toddlerkick_interface\obj\Debug\toddlerkick_interface.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Debug/toddlerkick_interface.exe.config
Debug/toddlerkick_interface.pdb