RobloxIPFinder[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

RobloxIPFinder.exe
Size

111KB
MD5

8d69bad05b7aad1ed543bbb1748ba8e9
SHA1

6df3a2cac0edd0837c905f401db450a9e9e19502
SHA256

9d790523d603def05d2c5d7a26c178c21775eec3ea47637978b9ea0c59aaca22
SHA512

37be64cd142901ea1f468d8dccf80382172e1de2f1ba66012dd713232efefa1a53d3e5f837e701bc57119637f48bcc26fd784026644c368d98235678a551dfa6
SSDEEP

1536:WS18VN496yCrqYGunTIgR4efy2VN4TZyCrqYGunTIgR4efy2q:4VNK6yCWSTI0KGNYZyCWSTI0Kt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RobloxIPFinder.exe

Files

RobloxIPFinder.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\user\documents\visual studio 2015\Projects\RobloxIPFinder\RobloxIPFinder\obj\Debug\RobloxIPFinder.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ