rbxsilent[.]exe | Triage™

General

Target
rbxsilent.exe
Size 208KB
Sample261001-xjtrlsad64
SHA256 7d45f01ef06da76bc08453366fbda762c77bd11f2d33f73072360184b587d2ca
MD5 0ff5e5900021c55658277f839e217675
SHA1 8af39a9d38d7f632cac1a54aabf8fb140e132919
SHA512 f636eaa7558dcb5a037d5fac6e3f1f26409b765192cab9751c4492b2a9b10f2787d72681692d4eac20e7a099929482035943e4aa6b926dc36315d8bf2cbafe4f
SSDEEP 6144:rjtsadpIoEbDHuuyFQ4nDhCu5L9AOMF+e7:rxsadpIoEbDHOBhCu5L9Le7
TLSH
T109248D1074D2C472D572053409F4EAB95A7EB8610F609AFF67D41B7E8E302C2DA35ABB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rbxsilent.exe

File Explorer

rbxsilent.exe

.exe 208KB

rbxsilent.exe

IMPHASH cee95446c0e43d9caadb8efbf312bf7a
SHA256 7d45f01ef06da76bc08453366fbda762c77bd11f2d33f73072360184b587d2ca
MD5 0ff5e5900021c55658277f839e217675
SHA1 8af39a9d38d7f632cac1a54aabf8fb140e132919
SHA512 f636eaa7558dcb5a037d5fac6e3f1f26409b765192cab9751c4492b2a9b10f2787d72681692d4eac20e7a099929482035943e4aa6b926dc36315d8bf2cbafe4f
SSDEEP 6144:rjtsadpIoEbDHuuyFQ4nDhCu5L9AOMF+e7:rxsadpIoEbDHOBhCu5L9Le7
TLSH
T109248D1074D2C472D572053409F4EAB95A7EB8610F609AFF67D41B7E8E302C2DA35ABB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29505

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\Projects\rbxsilent\Release\rbxsilent.pdb

kernel32

Sleep CreateFileW HeapSize GetProcessHeap SetStdHandle SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetOEMCP WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException GetLastError FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW GetCommandLineA GetCommandLineW HeapAlloc HeapFree GetFileType IsValidLocale GetUserDefaultLCID EnumSystemLocalesW CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP WriteConsoleW

user32

ShowWindow GetWindowTextA EnumWindows GetWindowTextLengthA PostMessageA IsWindowVisible

Sharing