RobloxPlayerBeta[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
RobloxPlayerBeta.dll
Size 25.5MB
Sample260928-negf2sttay
SHA256 591025b8025f18e6efa66378f6613a303b5f7c881cd81b131900768044953509
MD5 c00e5d5b7a1ac539a7c94d4fd8ef719e
SHA1 3a7c9d5360d64327b3caa9debb8d7ae15ced3ec5
SHA512 e5bb33914b7928e7b4b196d0c26aa22b143869726893e15d08b2f3f276f82431634ee8e3a66704733161bd1b9b83613b62d3d8e9167e6b1512356961525c425d
SSDEEP 393216:ThC/isdNClv/Z4FelG9d8JlYf0Ai7S/lHmswsyPdx64zdNZIcafQGVUo:TUxmlvR9QFizsyPdx64BNZIcafQG
TLSH
T1FF473343A38D53B9C0C6A61C514F008BB1C0E873D6BBC689BFCBCC077B6AE595596762
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
RobloxPlayerBeta.dll

File Explorer

RobloxPlayerBeta.dll

.dll 25.5MB

RobloxPlayerBeta.dll

IMPHASH 040bb46d53079381e22acd41c77c5f5a
SHA256 591025b8025f18e6efa66378f6613a303b5f7c881cd81b131900768044953509
MD5 c00e5d5b7a1ac539a7c94d4fd8ef719e
SHA1 3a7c9d5360d64327b3caa9debb8d7ae15ced3ec5
SHA512 e5bb33914b7928e7b4b196d0c26aa22b143869726893e15d08b2f3f276f82431634ee8e3a66704733161bd1b9b83613b62d3d8e9167e6b1512356961525c425d
SSDEEP 393216:ThC/isdNClv/Z4FelG9d8JlYf0Ai7S/lHmswsyPdx64zdNZIcafQGVUo:TUxmlvR9QFizsyPdx64BNZIcafQG
TLSH
T1FF473343A38D53B9C0C6A61C514F008BB1C0E873D6BBC689BFCBCC077B6AE595596762
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

47467362

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

AcquireSRWLockExclusive CloseHandle CreateFileW CreateThread DeleteCriticalSection EncodePointer EnterCriticalSection ExitProcess ExitThread FindClose FindFirstFileExW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThreadId GetEnvironmentStringsW GetFileType GetLastError GetModuleFileNameW GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTimeAsFileTime HeapAlloc HeapFree HeapQueryInformation HeapReAlloc HeapSize InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage LCMapStringW LeaveCriticalSection LoadLibraryExW MultiByteToWideChar QueryPerformanceCounter RaiseException ReleaseSRWLockExclusive RtlCaptureContext RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwindEx RtlVirtualUnwind SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter SleepConditionVariableSRW TerminateProcess UnhandledExceptionFilter VirtualProtect WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile HeapAlloc HeapFree ExitProcess LoadLibraryA GetModuleHandleA GetProcAddress

Name

.text

Size

Virtual Size

19.2MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

840KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

9.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mdm0

Size

Virtual Size

4.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.mdm1

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.mdm2

Size

25.5MB

Virtual Size

25.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

296B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

452B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

RobloxPlayerBeta.dll

kernel32

generic