free robux[.]exe | Triage™

General

Target
free robux.exe
Size 12KB
Sample260930-gr3rgssfqg
SHA256 95300dc1dad29d8e10b0c26251971a1aa571352fc9ceccaa99878571d7b6b2f4
MD5 d267544e945f5d1c20c61274730f091b
SHA1 c27646e56a87e32ef48aace0e6b2442a65f07e1e
SHA512 0768fcd4fd3b1b9250f56afac1eeedb8728055d87eae7e11864f932829e859db3a5930278e2bae78aa6172e0b677e18c7f6c9af23bffa915d5db3cf22ecab245
SSDEEP 192:/QF/gxRYojJXr3VPq82/fv3z/bZAVVS7R3Q5tfAxj0zGT:y/CYotXLVRuh3xj0
TLSH
T16F421947FB8548EBD66943BC82FB078AF0B1BE185B9213CB03A1E0551E4A7C5B6B15C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
free robux.exe

File Explorer

free robux.exe

.exe 12KB

free robux.exe

IMPHASH bad8e3cbda772559cb9147059e9acb2a
SHA256 95300dc1dad29d8e10b0c26251971a1aa571352fc9ceccaa99878571d7b6b2f4
MD5 d267544e945f5d1c20c61274730f091b
SHA1 c27646e56a87e32ef48aace0e6b2442a65f07e1e
SHA512 0768fcd4fd3b1b9250f56afac1eeedb8728055d87eae7e11864f932829e859db3a5930278e2bae78aa6172e0b677e18c7f6c9af23bffa915d5db3cf22ecab245
SSDEEP 192:/QF/gxRYojJXr3VPq82/fv3z/bZAVVS7R3Q5tfAxj0zGT:y/CYotXLVRuh3xj0
TLSH
T16F421947FB8548EBD66943BC82FB078AF0B1BE185B9213CB03A1E0551E4A7C5B6B15C8
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5376

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\a\Desktop\app\ConsoleApplication1\x64\Release\ConsoleApplication1.pdb

msvcp140

?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?good@ios_base@std@@QEBA_NXZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ ?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A ?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A ?uncaught_exceptions@std@@YAHXZ

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler __std_terminate __current_exception __current_exception_context memcpy

api-ms-win-crt-runtime-l1-1-0

_c_exit _cexit __p___argv __p___argc _initialize_onexit_table _register_onexit_function _crt_atexit terminate _exit _register_thread_local_exe_atexit_callback _seh_filter_exe _initterm _get_initial_narrow_environment _initialize_narrow_environment _configure_narrow_argv _initterm_e _set_app_type exit

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode __p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

kernel32

QueryPerformanceCounter SetUnhandledExceptionFilter InitializeSListHead GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId GetModuleHandleW

Sharing