RobloxSetup_0[.]3[.]696[.]0 January 16 2008[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
RobloxSetup_0.3.696.0 January 16 2008.exe
Size 9.6MB
Sample260804-nkfrpsvvbx
SHA256 7703501fdf0bb46288ebbfc5eac6a25a2e0b788ebd2eb9246d3fce8aa4dfa9b1
MD5 69e59ce8d92276e7a8a8bef55217d584
SHA1 d4f1e4016b2b769402acf72be3eb893567361990
SHA512 4b9800f1dd54a39eb8ebf5c622103cf2d0d3c1c4629cb0d1e96f29137fbe53e361b81c2fe001180c6029a5d6fcb3749e1e9e54e95af56181eb634e28145ae5f7
SSDEEP 196608:d7Rv7vJFZppcPNrJqAMBr08B6ceN1TBcaDBBMygBU4NwuLNvnMBSI:rTxjppArIv08UckTPXMyMRF0II
TLSH
T1B7A6003136DF49FCDBC01871059C5B613EA7740D5DE8E4EA9AB02369EB233067935E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RobloxSetup_0.3.696.0 January 16 2008.exe

File Explorer

RobloxSetup_0.3.696.0 January 16 2008.exe

.exe 9.6MB

RobloxSetup_0.3.696.0 January 16 2008.exe

IMPHASH 87ad1254fd71ca0fae9115e500a3a094
SHA256 7703501fdf0bb46288ebbfc5eac6a25a2e0b788ebd2eb9246d3fce8aa4dfa9b1
MD5 69e59ce8d92276e7a8a8bef55217d584
SHA1 d4f1e4016b2b769402acf72be3eb893567361990
SHA512 4b9800f1dd54a39eb8ebf5c622103cf2d0d3c1c4629cb0d1e96f29137fbe53e361b81c2fe001180c6029a5d6fcb3749e1e9e54e95af56181eb634e28145ae5f7
SSDEEP 196608:d7Rv7vJFZppcPNrJqAMBr08B6ceN1TBcaDBBMygBU4NwuLNvnMBSI:rTxjppArIv08UckTPXMyMRF0II
TLSH
T1B7A6003136DF49FCDBC01871059C5B613EA7740D5DE8E4EA9AB02369EB233067935E2A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

164209

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

shell32

ShellExecuteA SHBrowseForFolderA SHGetMalloc SHGetPathFromIDListA

comctl32

ord17

kernel32

GetCurrentProcess ExitProcess Sleep RemoveDirectoryA DeleteFileA WaitForSingleObject CreateProcessA lstrcpyA GetWindowsDirectoryA SetErrorMode GetTempPathA ExpandEnvironmentStringsA lstrcmpA lstrcmpiA GetTickCount GetExitCodeThread CreateThread CopyFileA InterlockedIncrement InterlockedDecrement QueryPerformanceFrequency CreateEventA lstrcatA GetTempFileNameA CompareStringA CompareStringW GetVersionExA SetFilePointer SetFileAttributesA SetFileTime LocalFileTimeToFileTime DosDateTimeToFileTime FreeLibrary GetProcAddress LoadLibraryA LockResource LoadResource SizeofResource FindResourceA GetSystemDefaultLCID GlobalHandle VerLanguageNameA GetLocalTime FormatMessageA LocalFree SetCurrentDirectoryA FindClose FindNextFileA CompareFileTime FindFirstFileA GetSystemTimeAsFileTime GetSystemInfo MulDiv IsValidCodePage GetVersion FlushFileBuffers SetEndOfFile GetDiskFreeSpaceA CreateFileA CreateDirectoryA GetExitCodeProcess GetCurrentThread GetLocaleInfoA DuplicateHandle UnhandledExceptionFilter GetOEMCP GetACP GetCPInfo SetUnhandledExceptionFilter LCMapStringW LCMapStringA IsBadWritePtr VirtualAlloc VirtualFree HeapCreate HeapDestroy GetEnvironmentVariableA TlsGetValue TlsAlloc TlsSetValue GetCurrentThreadId HeapSize HeapReAlloc GetCommandLineA GetStartupInfoA RaiseException RtlUnwind LeaveCriticalSection DeleteCriticalSection InterlockedExchange InitializeCriticalSection EnterCriticalSection SystemTimeToFileTime QueryPerformanceCounter ResetEvent SetEvent GetShortPathNameA VirtualProtect VirtualQuery IsBadReadPtr GetModuleHandleA TerminateProcess SearchPathA IsBadCodePtr GetStringTypeA GetStringTypeW SetStdHandle GetFileSize GlobalAlloc CloseHandle GlobalLock ReadFile GlobalUnlock GlobalFree GetThreadContext VirtualProtectEx FreeEnvironmentStringsW WriteProcessMemory FlushInstructionCache SetThreadContext ResumeThread GetFileAttributesA GetProcessHeap HeapAlloc HeapFree WriteFile lstrcpynA GetModuleFileNameA lstrlenW WideCharToMultiByte MultiByteToWideChar GetLastError SetLastError CreateFileMappingA MapViewOfFile UnmapViewOfFile FreeEnvironmentStringsA lstrlenA GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType GetDriveTypeA

user32

GetWindowTextA MoveWindow GetWindowPlacement DrawIcon DestroyIcon GetDlgCtrlID SetWindowTextA GetWindowTextLengthA GetParent EnableWindow GetDlgItemTextA CharUpperA GetWindow SetCursor UpdateWindow GetClassInfoA wvsprintfA FillRect GetSysColor GetSysColorBrush IsDialogMessageA SendMessageA GetWindowRect LoadStringA FindWindowA IntersectRect SubtractRect IsWindow DestroyWindow CreateDialogParamA CharNextA MessageBoxA WaitForInputIdle GetWindowLongA BeginPaint EndPaint SetWindowLongA GetClientRect ClientToScreen SetWindowPos GetWindowDC EndDialog GetDlgItem ShowWindow DialogBoxParamA GetDesktopWindow wsprintfA MsgWaitForMultipleObjects PeekMessageA DefWindowProcA PostMessageA KillTimer PostQuitMessage SetTimer LoadIconA LoadCursorA RegisterClassA CreateWindowExA GetMessageA TranslateMessage DispatchMessageA GetDC ReleaseDC CharPrevA ExitWindowsEx SendDlgItemMessageA GetSystemMetrics CharLowerBuffA SetRect

gdi32

GetTextExtentPoint32A SetBkMode SetTextColor GetObjectA CreateFontIndirectA CreateSolidBrush CreateCompatibleDC SelectObject CreateFontA DeleteDC DeleteObject GetStockObject GetSystemPaletteEntries CreatePalette GetDeviceCaps SelectPalette RealizePalette CreateDIBitmap BitBlt TranslateCharsetInfo

advapi32

RegQueryValueA RegOpenKeyA RegSetValueExA RegDeleteValueA RegOpenKeyExA RegQueryValueExA RegCloseKey RegEnumValueA AdjustTokenPrivileges LookupPrivilegeValueA OpenProcessToken FreeSid EqualSid AllocateAndInitializeSid GetTokenInformation OpenThreadToken RegCreateKeyExA

rpcrt4

UuidCreate RpcStringFreeA UuidToStringA

ole32

StgIsStorageFile StgOpenStorage CoUninitialize CoInitialize

oleaut32

SysFreeString SysAllocStringLen SysReAllocStringLen SysStringLen SysAllocString VariantChangeType VariantClear