'
metaflows logo
Category Started On Completed On Duration Cuckoo Version
FILE 2018-01-31 16:32:19.853159 2018-01-31 16:34:22.209110 122 seconds 2.0-dev
Machine Label Manager Started On Shutdown On
win7cuckoo win7 Clone 1 VirtualBox 2018-01-31 16:32:21 2018-01-31 16:34:22

File Details

File name d3d1ec9e860aa134ef4794a6e112e18d6b011b4f.exe
File size 820928 bytes
File type PE32 executable (GUI) Intel 80386, for MS Windows
CRC32 61CA2EA8
MD5 42473fdf4eab222cf4dc9009451eba27
SHA1 d3d1ec9e860aa134ef4794a6e112e18d6b011b4f
SHA256 f38c6752b4fea42f5be9637beec6a988409dd80998304dd3606eba667fde861e
SHA512 14d507484c0d34f06deb47e4711625d7bb43c994e414ae909203468e1ae472b209e7dd6cfc6e7e0cb7a66ba40981fe2e19e922f9bb94c8971e0f9ed80bd5868d
Ssdeep None
PEiD None matched
Yara
  • Str_Win32_Http_API (Match Windows Http API call)
VirusTotal Permalink
VirusTotal Scan Date: 2018-01-31 18:43:34
Detection Rate: 1/66 (Expand)

MetaFlows Scores

Metaflows Analysis Results (Signatures=50, Anomalies=0, PEiD=0, Yara=0, VT[1517434576]=0): Snort Events=3, AV Events=0
Total Score=50

SNORT EVENTS:
ETPRO TROJAN Common Downloader Header Pattern UH
ET INFO EXE - Served Inline HTTP
ETPRO EXPLOIT Multiple Vendor Malformed ZIP Archive Antivirus Detection Bypass

Dropped File/Buffer Yara Signatures:
f766df180452c176_fmod.dll: GenerateTLSClientHelloPacket_Test
993ea35246be106a_robloxplayerbeta.exe: GenerateTLSClientHelloPacket_Test
f38c6752b4fea42f_robloxplayerlauncher.exe: Str_Win32_Http_API

Signatures

generic_aws_url_accessed details
recon_fingerprint details
has_pdb details
pe_features details
openprocess_nonchild details
Startup_File_Accessed details
allocates_rwx details
antisandbox_foregroundwindows details
antivm_disk_size details
creates_shortcut details

Screenshots

No screenshots available.

Static Analysis

Version Infos

Sections

Resources

Imports

Strings

Dropped Files

fb990e9dafe57374_RBX-14524489.tmp

558e784f1c857ce2_RBX-62F9DD46.tmp

1df692c39af9ed4f_RBX-4184A509.tmp

4e1673118c404d1d_RBX-495A9343.tmp

94ebb27ba8f5582b_RBX-C590CDCB.tmp

cf0e81637ce7a8f7_RBX-E6A99861.tmp

daed83b464689cea_RBX-7229DC82.tmp

1a23b4c47e659c04_RBX-5DE46F15.tmp

37ea1111ea934b8d_RBX-E899DA79.tmp

8c593cbea03cb62f_RBX-31179918.tmp

14c9cde5bd628e80_RBX-C9ABBB1E.tmp

7ef81b872d5dacbb_RBX-69472890.tmp

92401200f1d6cea5_bbuttondark@2x.png

1e7920db471e2179_ic-search-gray.png

6aae308ac5a2688d_hoverpopupright.png

27ed2e689b5be44d_smoke_main.dds

56e0a6005b1a0e10_playerlist@2x.png

e9c9c263ff5e5552_notifications.png

5f0aba434e8e3e8a_input-send-message@3x.png

bbf57b093839de8f_rectbackgroundwhite.png

775e1c07d81be246_newbkg_square@2x.png

a0343f531e6a0f05_smoke_color.dds

1ac4441798747980_character.rbxm

119721aad6fb537c_corescriptlocalization.json

dadbc7eb35e3b704_gr-shadow.png

19c886948f1fa233_new-message-indicator@2x.png

2efa6f588fc14224_page14.png

6efb71117bf9c5c6_normal_01.dds

5d023f7568de38f1_slider-fill-left-cap.png

c679bb5a58e68d55_ic-checkbox-on copy@3x.png

f6d41fdc61557730_gr-profile-border-48x48@2x.png

bf6188bfafd38ce7_scrollbuttonup_ovr.png

2a51ad9239a2102a_normaldetail.dds

df1ee50b60a9fdfa_mouselock_off.png

00369b957b2e8906_sky512_ft.tex

710d7cc10730c88b_ic-tbc@2x.png

2e6f946d4cf1db3f_sky512_rt.tex

39161e10b5a0c7a0_gr-send.png

aa9801c634a33213_rightleg.mesh

d4ec1fb5ecf4a644_dialog_tail.png

7ff3078f857af8d0_arrowfarcursor.png

a84932296175c0c7_gr-shadow@2x.png

e59f2b55c0d259eb_bar-empty-mid.png

f128903dfb72130f_btn_newwhite@2x.png

9e681af045c9d645_diffuse.dds

193f8802854250bd_recenter.png

79f328b265a4c314_xboxcontroller@2x.png

f033e0dae430ae2e_charactercontrolscript.rbxmx

893a58e7946728c9_appsettings.xml

4be89bb563dafbb5_normal.dds

a38770a2526f2e36_buttonselected.png

4657deb1feac5051_chatflip@2x.png

2cef2a4c8c8a543b_ic-back.png

a7d80fa50db26abd_modal@3x.png

1163b52c0ac07ad1_key_selection_9slice.png

bd788a47c93efdcb_headc.mesh

a9c9c6e33d8b3137_ybuttonlight.png

ee048b6ec03b13da_slider_new_tab.png

9e7accb1f14139c8_dialog_green@2x.png

2a68ef7d695056b1_roblox studio.lnk

38e04cd108ac9bf4_touchcontrolssheet.png

42f7aa4ad91b74b8_health-bkg-center@2x.png

73cf7bfea5df5828_charactersound.rbxmx

8bd23be1d40155f0_menu@2x.png

647e8b2f6ebb9456_slider-fill-left-cap@2x.png

2b1bd51ec8cc19a9_wangindex.dds

9a0b210cdd5fa323_dialog_white@2x.png

817c8df4be97741e_ic-alert@2x.png

2b6fe024a3467be7_menubuttonselected.png

1b3ead45555d4eec_scroll_left.png

87c60393cfc9ed6a_dialog_purpose_shop.png

ffa2669bbfd4eeff_gr-shadow@3x.png

cf2253de52257165_menuselection@2x.png

650e7fc77ff154a0_friendicon.png

bd7aad7c6b731cf6_icon_stream_off.png

b57f101bfd0961a3_button.png

be5f9f151cf57f9a_closebutton_dn.png

f8a2f91b2d0a197c_advancedmove_nojoint.png

678f6c0dd5aadbb4_ic-notification@2x.png

7f41882fddf1afa6_page0.png

276a39d76aa94c4d_slider_new_tab@2x.png

faa8b448b2b3b706_ic-leave.png

c10cbe9f4550bab2_normal_02.dds

70041c11a6218a64_ic-add-friends@2x.png

67ee33cc637a7aae_icon_obc-16.png

748076630a7b8391_pointerover.png

ebafb465b45169e9_blockedicon.png

3a2f2b40b07f0dcd_ic-robux@3x.png

84742579746327a5_dialog_green.png

d34dad2259b92b70_icon_tbc-16.png

312e9c46440ee593_normaldetail.dds

b65ea688662e1c19_emptybottomright.png

f12224dba5d2b1fa_oldxboxcontroller.png

b399dcd2e8927cbe_page6.png

03f9b6b12dda7157_ic-check.png

45079adb8890a66d_icon_friendrequestsent_16.png

c855326f462265ff_ic-thumbup@3x.png

efec88f3647c340d_circle_gray4@2x.png

1ae85f5d8235a88a_humanoidhealthregenscript.rbxmx

08948fc1317189b6_forcefield_glow_color.dds

c5d5fc031a2b92d0_explosion.png

8e978f65a5875a0b_ic-back@2x.png

f3f9b018cfaf7896_tileshadowmissingtop.png

4f3f39f1972f3cbd_motor.png

e661d03da472347a_bottomright.png

6177f277bb050df1_common_alpha.dds

75788db89aebffb0_backpack.png

65b88a3ac295757c_normal.dds

e5ef3674d633042d_togglechat@2x.png

8eefb5bcd48fbce6_togglechatdownflip.png

b7007cf3b23f0fd8_loadingcircle.png

af91bae5d7f977ab_dropdown_arrow.png

32dcad006a55c41a_pointer@2x.png

11eaa83abfc6744c_speedbarbkg.png

48ce521de70c2550_buttonleftdown.png

e7f1da44c3aa840f_gr-indicator-instudio@2x.png

6b186021c6d3ae42_explosion01_shockwave_main.dds

c0cef52078f0bd7f_diffusearray.dds

a6cb2d2e5395356f_ic-robux@2x.png

c0a9d19641e0416c_ic-leave@2x.png

db7dff708ce57db0_characterwideflathands.rbxm

390968a53112a22a_input-send-message@2x.png

0a08c694374437d4_scroll-top.png

f766df180452c176_fmod.dll

30d3402c3cdf09ec_notifier_glow.png

5ab8cf1129894df1_page10.png

df90f2acb4884011_ic-remove.png

cee662aaec2c56ca_ic-checkbox@3x.png

d61107d0f21d4a8d_speedbarbkg@2x.png

42987376a2a06aef_scrollbuttonup.png

0c3a759bd1620f7f_messagecounter@2x.png

85ce230640acaab9_targetfiller.png

301fc85d4908e952_scroll-top.png

9a7a64fba48ab092_ic-close-white.png

3e52b300742ee9e2_sparkles_main.dds

d84d5d1b096cefce_topleft.png

dba6b3098508fda3_sky512_dn.tex

e23af2a133afb9b7_specular.dds

5ca6db06c4d1fa48_mouselockedcursor.png

8a7899c6df99b842_hamburger.png

0c1d3313b6e8efb7_forcefield_vortex_main.dds

1d8f3b6a5d53bb39_dialog_red@2x.png

0b6c731f092a7256_slider-bkg-left-cap@2x.png

1ceb10bbe7425cdb_normal.dds

792a0adfc2cc31f2_gr-profile-border-48x48-dotted@3x.png

de4d22ceca606bad_buttonactive.png

31ea6cefbdf08e79_mic_icon.png

f8e60387f6a571d3_ic-bc.png

32bb40a9ec31c2d9_ic-friends@2x.png

26d83c6d7248fd72_speedbarempty.png

a3f7455af6ff0c83_arial.ttf

594db4bbf536cf2a_scrollbuttondown_dn.png

5908c3abb47509fa_normal_25.dds

bbccbb4abc2ba759_modal.png

c224b4d75fa2209d_headl.mesh

ea3c853ed18c01d8_sky512_lf.tex

29d54b5a1e868f4f_chat-bubble-self-tip@2x.png

8118791563f2baa6_speculararray.dds

0efdd92341ef16c6_ic-group.png

731fd9d2bc7405b0_scroll-top@2x.png

f2cf185db3c3f66c_scroll_down.png

37907674435b17b6_ic-checkbox@2x.png

f18253affd968c8e_notosanscjkjp-regular.otf

8e5250e5a5f3ce76_chatflip.png

36708ac49ec8af15_ic-obc@2x.png

0491e140eb6b5371_ic-more@3x.png

7f3c1894b7482e48_leave@2x.png

d04c2c4a21402c50_icon_admin-16.png

9938f330d9ad199c_surfacesdefault.png

38d366091d6b3ba0_playerlist.png

415ca1637bac8c29_fire_sparks_color.dds

852ab9a3854a85e0_ic-back-android.png

36a6968d29550bce_blockupperleft.png

01e15cb8baf402a5_abuttonlight@2x.png

d2f0a5051c3ed995_r15composittorsobase.mesh

5543c8f74fdaed9f_normal_16.dds

a4ee5ffae72cb250_erroriconsmall.png

5919e357c8980482_scroll-top@2x.png

aeaf413502cb97a1_circlewhite.png

593e01f1e5ab5ab6_face.png

2c06f495891cc2b7_targetline.png

6042c2f0a083963a_transformninetydegrees.png

300577eca3d013a3_icon_follower-16.png

479916e51d3ead73_account_over13.png

2df4022bf8f3fdec_bar-full-mid.png

eaacff2cad27efe0_scroll-bar@2x.png

cc1d26bcc192b31b_btn_newwhiteglow.png

386fd4d4948c4e00_headi.mesh

ff685030ae6e70dd_btn_grey.png