Fdape Roblox[.]exe | Triage

Sharing

General

Target

Fdape Roblox.exe
Size

34.0MB
MD5

4de82a567415731642cfbec63720018e
SHA1

a31091a9c234bfd6f86ad036ecc6106132032ec7
SHA256

247031477de373464f7ca3c4f117b2767670f1105f09e10de18182ed05ef9664
SHA512

cece6c5b506b836788bb417bb52ef8386e70aa15b74bbec0c302ff5c189be03a5ff59ea4b1349efa19ecd265d57954a9124e723fdfb920aa02223188ccd3e25d
SSDEEP

3072:NZLhDAXHkwQNoD9N6Bz65/M6If+3Js+3JFkKeTnI:RDAcW9N6xBt25

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Fdape Roblox.exe

Files

Fdape Roblox.exe
.exe windows:4 windows x86 arch:x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ