C:\Users\Samuel\Downloads\roblox-master\Installer\BootstrapperClient\bin\Release\BootstrapperClient.pdb
Static task
static1
1 signatures
General
-
Target
RobloxPlayerLauncher.exe
-
Size
781KB
-
MD5
56639ce27cc7d7eb971c0ccbd0176c88
-
SHA1
1146fa062b6e794220b785d25b74d87a658bbc4b
-
SHA256
248210ab5672dabf88d101d810bd3e8a9050df0c2d026a19f92576aebfeb23f4
-
SHA512
630c834d6dc748b53ebd34249efdebcdf59dc6432a0a51c1bffd96793247205fc7fd44c8c4431063982ce02e947769a03d47ff97bea055617553ea4db060c3af
-
SSDEEP
12288:kc8Pzl9YIHKmklWCTBaHFZpcssaS+XMDkN:sB/hkldTMFZpjsJ+XMDe
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource RobloxPlayerLauncher.exe
Files
-
RobloxPlayerLauncher.exe.exe windows:5 windows x86 arch:x86
404050ce30762ac39f803f8c8464837c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
VerSetConditionMask
SetLastError
TlsGetValue
TlsSetValue
SizeofResource
GetTempPathW
DeleteFileW
GetVersionExW
lstrcmpW
GetProcAddress
GetModuleHandleW
GetModuleFileNameW
InterlockedCompareExchange
GetQueuedCompletionStatus
VerifyVersionInfoW
CreateIoCompletionPort
PostQueuedCompletionStatus
InterlockedExchangeAdd
InterlockedExchange
SleepEx
QueueUserAPC
TerminateThread
WaitForMultipleObjects
TlsAlloc
FormatMessageA
LeaveCriticalSection
EnterCriticalSection
FormatMessageW
LocalFree
InterlockedIncrement
SetWaitableTimer
Sleep
QueryPerformanceFrequency
WaitForSingleObjectEx
GetCurrentThreadId
GetCurrentThread
LoadLibraryW
FreeLibrary
WaitForSingleObject
TerminateProcess
GetTickCount
LockResource
GetGeoInfoW
CompareFileTime
FindFirstFileW
FindNextFileW
FindClose
lstrlenW
GetLocalTime
OpenProcess
CreateDirectoryW
GetDiskFreeSpaceExW
SetFileAttributesW
RemoveDirectoryW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetShortPathNameW
CreateFileW
GetFileAttributesW
GetFileAttributesExW
GetFileSizeEx
MulDiv
GetExitCodeProcess
lstrcpyW
lstrcatW
WriteFile
GetFileTime
DosDateTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
WaitForMultipleObjectsEx
OpenEventA
ResumeThread
GetModuleHandleA
CreateWaitableTimerA
LoadResource
FindResourceW
FindResourceExW
TlsFree
GetSystemTimeAsFileTime
CreateSemaphoreA
GetCurrentProcess
DuplicateHandle
ReleaseSemaphore
GetUserGeoID
InterlockedDecrement
ReleaseMutex
CreateMutexW
ResetEvent
SetEvent
CloseHandle
OpenEventW
CreateEventW
CreateEventA
GetSystemTime
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
HeapDestroy
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
MultiByteToWideChar
HeapSize
InitializeCriticalSectionAndSpinCount
CreateProcessW
HeapFree
QueryPerformanceCounter
user32
CharNextW
AllowSetForegroundWindow
GetWindowLongW
SendMessageW
GetWindowRect
GetParent
CallWindowProcW
GetDlgItem
LoadBitmapW
CharUpperW
ShowWindow
InvalidateRect
GetWindowTextW
PostMessageW
SetForegroundWindow
IsWindowVisible
RegisterClassW
EnableWindow
CreateWindowExW
MessageBoxA
DestroyWindow
KillTimer
EnumWindows
GetWindowThreadProcessId
PostThreadMessageW
MessageBoxW
SetWindowPos
SetFocus
SetTimer
ReleaseDC
GetDC
GetSystemMetrics
LoadIconW
EndPaint
FillRect
BeginPaint
SetWindowLongW
PostQuitMessage
DispatchMessageW
SetWindowTextW
LoadAcceleratorsW
GetMessageW
TranslateAcceleratorW
DefWindowProcW
TranslateMessage
gdi32
CreateFontW
GetStockObject
Rectangle
SelectObject
CreatePen
SetBkMode
SetTextColor
GetDeviceCaps
DeleteObject
CreateSolidBrush
advapi32
GetTokenInformation
CryptHashData
CryptDestroyHash
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
RegFlushKey
RegDeleteValueW
RegEnumKeyExW
RegDeleteKeyW
DuplicateToken
CheckTokenMembership
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
OpenThreadToken
OpenProcessToken
CopySid
GetLengthSid
IsValidSid
CryptGetHashParam
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
GetUserNameW
shell32
ShellExecuteExW
SHGetFolderPathAndSubDirW
ShellExecuteW
ole32
CoInitialize
CoCreateGuid
StringFromGUID2
CoCreateInstance
CoUninitialize
oleaut32
SysFreeString
SysAllocString
VariantInit
VariantClear
RegisterTypeLi
shlwapi
StrDupW
PathAddBackslashW
StrCmpW
StrStrW
SHDeleteKeyW
StrCpyW
StrRChrW
PathFileExistsW
StrCmpNW
msvcp140
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?id@?$numpunct@D@std@@2V0locale@2@A
?seekpos@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@V32@H@Z
?seekoff@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE?AV?$fpos@U_Mbstatet@@@2@_JHH@Z
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?pbackfail@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHH@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAI@Z
?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PAD_J@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@_JH@Z
?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?seekp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?tellp@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE?AV?$fpos@U_Mbstatet@@@2@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
_Mbrtowc
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$numpunct@_W@std@@2V0locale@2@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@K@Z
?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@V?$fpos@U_Mbstatet@@@2@@Z
?_Gettrue@_Locinfo@std@@QBEPBDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?uncaught_exception@std@@YA_NXZ
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?id@?$ctype@D@std@@2V0locale@2@A
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??0_Locinfo@std@@QAE@PBD@Z
??1_Locinfo@std@@QAE@XZ
?_Incref@facet@locale@std@@UAEXXZ
??_D?$basic_istream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?classic@locale@std@@SAABV12@XZ
?__ExceptionPtrRethrow@@YAXPBX@Z
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?__ExceptionPtrCreate@@YAXPAX@Z
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?__ExceptionPtrDestroy@@YAXPAX@Z
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?_BADOFF@std@@3_JB
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
ws2_32
WSASend
WSASocketW
setsockopt
getaddrinfo
freeaddrinfo
connect
getsockopt
WSARecv
ioctlsocket
closesocket
WSAGetLastError
WSACleanup
WSAStartup
WSASetLastError
select
wininet
HttpQueryInfoW
InternetSetOptionW
HttpEndRequestW
InternetWriteFile
InternetConnectW
InternetCloseHandle
HttpSendRequestW
HttpSendRequestExW
InternetReadFile
InternetOpenW
HttpOpenRequestW
HttpAddRequestHeadersW
InternetQueryDataAvailable
sensapi
IsNetworkAlive
userenv
UnloadUserProfile
comctl32
_TrackMouseEvent
InitCommonControlsEx
psapi
GetProcessImageFileNameW
EnumProcesses
vcruntime140
memmove
__std_terminate
longjmp
__std_exception_copy
__std_exception_destroy
__std_type_info_compare
_purecall
memchr
wcsstr
memset
__CxxFrameHandler3
__vcrt_InitializeCriticalSectionEx
_CxxThrowException
_except_handler4_common
memcpy
memcmp
_setjmp3
api-ms-win-crt-string-l1-1-0
strncpy
wcsncpy_s
wcscpy_s
wmemcpy_s
tolower
strcpy_s
_wcsicmp
wcscat_s
isspace
ispunct
wcsnlen
api-ms-win-crt-heap-l1-1-0
calloc
_recalloc
_callnewh
free
malloc
realloc
_set_new_mode
api-ms-win-crt-convert-l1-1-0
wcstombs_s
_wtoi
atoi
api-ms-win-crt-stdio-l1-1-0
fflush
__stdio_common_vsprintf_s
__p__commode
__stdio_common_vswprintf_s
fopen
_set_fmode
__stdio_common_vsprintf
__stdio_common_vswprintf
ferror
fseek
fread
__stdio_common_vsnwprintf_s
__stdio_common_vsnprintf_s
fgetc
fputc
ungetc
ftell
setvbuf
fsetpos
_fseeki64
fgetpos
fwrite
_get_stream_buffer_pointers
fclose
api-ms-win-crt-runtime-l1-1-0
_c_exit
_register_thread_local_exe_atexit_callback
_beginthreadex
terminate
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
__p___argc
__p___wargv
_invalid_parameter_noinfo
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
strerror
_getpid
_invalid_parameter_noinfo_noreturn
_controlfp_s
_errno
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-filesystem-l1-1-0
_unlock_file
_lock_file
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
api-ms-win-crt-math-l1-1-0
_except1
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
iphlpapi
GetAdaptersInfo
Sections
.text Size: 247KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 115KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 108B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 388KB - Virtual size: 388KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ