Resubmissions

04/10/2024, 16:36

241004-t4ddksyfpf1

04/10/2024, 16:36

241004-t39qdsvcjk

03/10/2024, 18:46

241003-xemsha1bkl10

General

  • Target
    RobloxStudioBeta.exe
  • Size 149.8MB
  • Sample241004-t39qdsvcjk
  • SHA256 9463c02624b207f4ab12a90bb3c7a9a6428d39f3be78c596e300be1bd77f7ec3
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • RobloxStudioBeta.exe
    .exe 149.8MB

RobloxStudioBeta.exe

  • IMPHASH 00911ec8e552e4d88f26f5efc3c6ab18
  • SHA256 9463c02624b207f4ab12a90bb3c7a9a6428d39f3be78c596e300be1bd77f7ec3
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
99:9e:79:b7:4f:34:5c:90:fe:c0:c3:46:9b:c9:9e:35:a9:39:f1:08:97:cf:bc:d3:ee:ac:8a:47:7e:e8:ec:b5
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
SERIALNUMBER=3780902,CN=Roblox Corporation,O=Roblox Corporation,L=San Mateo,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553
Chains

Jan 1, 0001

Minor OS version
0
Major OS version
6
Entry point
62537896
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
C:\buildAgent\work\ci_nbs_stu-x64\build.ninja\studio\vs2019\x64\release\RobloxStudio\Integration\StudioApp\RobloxStudioBeta.pdb