RobloxFree.rar
- SHA256 12fb9cffd55a3f182811d24901e577b1b8b8d67640c0c5368bdf35de99629728
Overview
overview
10Static
static
3RobloxFree...xt.exe
windows10-ltsc_2021-x64
10RobloxFree...xt.exe
windows10-2004-x64
10RobloxFree...xt.exe
android-13-x64
RobloxFree...xt.exe
android-10-x64
RobloxFree...xt.exe
macos-10.15-amd64
4RobloxFree...xt.exe
debian-12-armhf
RobloxFree...xt.exe
debian-12-mipsel
RobloxFree...xt.exe
debian-9-armhf
RobloxFree...xt.exe
ubuntu-18.04-amd64
RobloxFree...xt.exe
ubuntu-20.04-amd64
RobloxFree...xt.exe
ubuntu-22.04-amd64
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RobloxFree/RPGRobloxExt.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
RobloxFree/RPGRobloxExt.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
RobloxFree/RPGRobloxExt.exe
Resource
android-33-x64-arm64-20260708-en
android-13-x64
0 signatures
150 seconds
Behavioral task
behavioral4
Sample
RobloxFree/RPGRobloxExt.exe
Resource
android-x64-20260325-en
android-10-x64
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
RobloxFree/RPGRobloxExt.exe
Resource
macos-20260915-en
macos-10.15-amd64
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
RobloxFree/RPGRobloxExt.exe
Resource
debian12-armhf-20260513-en
debian-12-armhf
0 signatures
150 seconds
Behavioral task
behavioral7
Sample
RobloxFree/RPGRobloxExt.exe
Resource
debian12-mipsel-20260513-en
debian-12-mipsel
0 signatures
150 seconds
Behavioral task
behavioral8
Sample
RobloxFree/RPGRobloxExt.exe
Resource
debian9-armhf-20260513-en
debian-9-armhf
0 signatures
150 seconds
Behavioral task
behavioral9
Sample
RobloxFree/RPGRobloxExt.exe
Resource
ubuntu1804-amd64-20260513-en
ubuntu-18.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral10
Sample
RobloxFree/RPGRobloxExt.exe
Resource
ubuntu2004-amd64-20260513-en
ubuntu-20.04-amd64
0 signatures
150 seconds
Behavioral task
behavioral11
Sample
RobloxFree/RPGRobloxExt.exe
Resource
ubuntu2204-amd64-20260513-en
ubuntu-22.04-amd64
0 signatures
150 seconds
General
- Target RobloxFree.rar
- Size 1.0MB
- Sample260930-ay1r5sysby
- SHA256 12fb9cffd55a3f182811d24901e577b1b8b8d67640c0c5368bdf35de99629728
- MD5 669f917e539c0c3bf233bc1f904d4ad4
- SHA1 47267464826db25949e8de04320bd74923d551ea
- SHA512 245d1f8030eac86352921faa59c5e27b2cbf158e4bc8213e36ad794cbb041b27160d42b08d6c3406da8d20c8babec9fcf85acf461f5224829b0a894d1628f730
- SSDEEP 24576:RCwwbD5R2xQClOc2Pad9uMvM2OPcyIiVSRH/KgbeZmsvul23I:MwklRAQ0Z2P49uuM2OPcyvE93Fse23I
- TLSH T13725333B9F624873CE7B423E5B4AC763876A73A9461E061B47412014F0BC7AB51F7E92
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/RobloxFree/RPGRobloxExt.exe
File Explorer
-
RobloxFree.rar.rar 1.0MB
-
RobloxFree/RPGRobloxExt.exe.exe 1.5MB
RobloxFree/RPGRobloxExt.exe
- IMPHASH 428e6623e0a38ece140f4e62154d5510
- SHA256 d33a81e5b1c9f133d34b130df9681a3660b0a14c2237446044691d4bbab724be
- MD5 abbe13fe1fc88f1abd2136aba92d003e
- SHA1 d812e703fa348191452fda7f3ca593859605decf
- SHA512 110d597c07db95773e36b2e4869bcb608e633f5253d7c0019de7b4202d089b282881049fc210ad564186cfe808ca5231565635a66069764e5880b094586e1e27
- SSDEEP 24576:NhgadT9ORy7PW+8Za6t6UVHediZvYANErnk7WCxYZHSkh0edVjt0L0z+k7x2J:Dg+j7uW6gcrtYACnQY5needoL0z+kW
- TLSH T1E665E045B2F810FDD02BD135D986A60BEA72381817304DEB53E159992FB37E09BBB712
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
521168
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
d3d9
Direct3DCreate9
dwmapi
DwmExtendFrameIntoClientArea
DwmIsCompositionEnabled
DwmGetColorizationColor
DwmEnableBlurBehindWindow
user32
TrackMouseEvent
GetKeyboardLayout
GetClipboardData
EmptyClipboard
CloseClipboard
GetForegroundWindow
SetClipboardData
IsIconic
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
ClientToScreen
GetCapture
ScreenToClient
MonitorFromWindow
LoadCursorA
GetMessageExtraInfo
GetKeyState
DefWindowProcW
mouse_event
GetAsyncKeyState
EndPaint
BeginPaint
IsWindowUnicode
SetProcessDPIAware
GetClientRect
SetCursor
InvalidateRect
GetWindowThreadProcessId
GetWindow
IsWindowVisible
SetWindowPos
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
IsWindow
DispatchMessageW
GetMonitorInfoW
PeekMessageW
EnumWindows
SetLayeredWindowAttributes
GetClassNameW
PostQuitMessage
EnumDisplaySettingsW
SetForegroundWindow
UpdateWindow
PostMessageW
SetWindowLongPtrW
GetWindowLongPtrW
DispatchMessageA
DestroyWindow
SetWindowRgn
GetSystemMetrics
SetTimer
DrawTextA
RegisterClassA
DefWindowProcA
CreateWindowExA
TranslateMessage
PeekMessageA
UnregisterClassA
KillTimer
SetCapture
gdi32
CreateRoundRectRgn
CreateRectRgn
RoundRect
GetStockObject
BitBlt
CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
CreateFontW
DeleteObject
DeleteDC
SetTextColor
SetBkMode
CreatePen
CreateSolidBrush
gdiplus
GdipCloneImage
GdipAlloc
GdiplusShutdown
GdiplusStartup
GdipBitmapUnlockBits
GdipCreateBitmapFromStream
GdipDisposeImage
GdipFree
GdipBitmapLockBits
GdipGetImageHeight
GdipGetImageWidth
shlwapi
ord12
winmm
timeEndPeriod
timeBeginPeriod
PlaySoundA
kernel32
LCMapStringW
CompareStringW
LoadLibraryExW
VirtualProtect
HeapFree
HeapAlloc
GetFileType
ReadConsoleW
GetConsoleMode
SetFilePointerEx
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
IsProcessorFeaturePresent
GetCommandLineW
GetCommandLineA
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
FlushFileBuffers
ExitProcess
GetCurrentProcess
ReadFile
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
EncodePointer
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
RtlLookupFunctionEntry
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
GetConsoleOutputCP
GetFileSizeEx
FindFirstFileExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
GetStringTypeW
HeapSize
HeapReAlloc
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetTimeZoneInformation
WriteConsoleW
SetEndOfFile
TerminateProcess
CreateDirectoryA
Process32FirstW
Process32NextW
GetCurrentThread
SetThreadPriority
Module32NextW
ReadProcessMemory
Module32FirstW
GetLastError
CreateToolhelp32Snapshot
WriteProcessMemory
OutputDebugStringA
MultiByteToWideChar
GlobalAlloc
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
GetModuleHandleA
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
IsDBCSLeadByte
GetProcAddress
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
GetTickCount
FindFirstFileA
FindNextFileA
FindClose
CopyFileA
GetFileAttributesA
DeleteFileA
CreateDirectoryW
SizeofResource
WriteFile
GetEnvironmentVariableW
CreateFileW
GetFileAttributesExW
LockResource
DeleteFileW
CloseHandle
LoadResource
FindResourceW
CreateProcessW
GetModuleHandleW
CompareFileTime
FindFirstFileW
SetConsoleTitleA
FindNextFileW
WaitForSingleObject
OpenProcess
Sleep
CreateThread
QueryFullProcessImageNameW
AllocConsole
GetModuleFileNameA
shell32
ShellExecuteW
imm32
ImmReleaseContext
ImmSetCandidateWindow
ImmGetContext
ImmSetCompositionWindow
winhttp
WinHttpQueryDataAvailable
WinHttpReceiveResponse
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpSetOption
WinHttpCloseHandle
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpConnect
WinHttpCrackUrl
Name
.text
Size
693KB
Virtual Size
692KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
269KB
Virtual Size
268KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
4KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
509KB
Virtual Size
509KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
2KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=172, id=261, version=33145,
count=30, id=260, version=33145,
count=24, id=259, version=33145,
count=10, id=259, version=35721,
count=17, id=260, version=35721,
count=46, id=261, version=35721,
count=23, id=257, version=33145,
count=260, id=1, productName=Unmarked objects,
count=17, id=265, version=36256,
count=1, id=255, version=36256,
count=1, id=151,
count=1, id=258, version=36256,