The robuxs gratisروبوكس مجاني exe File Malware Analysis

Technical Analysis

File Name	robuxs gratisروبوكس مجاني.exe
File Type	PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version	1.0.213.174
Database Version	2025-04-15 06:00:30 UTC

Scan Another File

File Identification

Hash Type	Value	Action
MD5	6ac2bb21bf591bfb9d5f84c976f59a65
SHA1	1a80a60ed5a61c135b8faa1937276e5347655dff
SHA256	b3cbd219d837daea1c0d45d62e2fe3cfc186941c70da851448f29c54983568a6
SHA512	f786b697f8b413ff056299b8464e678c3333b5d98f70326d816240b394405da9337ff11cfd67f167eba4ea5f7a443538e8f2d5e450d968b07d4948a08b8f8484
ImpHash	7e0a0e8f80bbd1a9c0078e57256f1c3d

PE Analysis

Basic Information

▼

Icon	Hash: c04b6d38aca52fe16bda4fd2703a127b Fuzzy: d56c9c4985a406986106ba5811e695e9 dHash: 7212f27269b10638
Image Base	`0x140000000`
Entry Point	`0x140032690`
Compilation Time	2025-03-20 10:01:29
Checksum	0x00000000 (Actual: 0x000719a7)
OS Version	6.0
PEiD Signatures	`PE32+ executable (GUI) x86-64, for MS Windows`
PDB Path	`D:\Projects\WinRAR\SFX\build\sfxrar64\Release\sfxrar.pdb`
Digital Signature	No valid SignedData structure was found.
Imports	3 libraries KERNEL32, OLEAUT32, gdiplus
Exports	0 functions
Resources	21 Resources
Sections	7 Sections

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	307,038 bytes	307,200 bytes	6.49 (Normal)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`5995623607A979A298A031454D097062`
`.rdata`	`0x0004c000`	76,718 bytes	76,800 bytes	5.27 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`BB9DEEC6C279C08D33B0F2F392FAF6CD`
`.data`	`0x0005f000`	59,732 bytes	7,168 bytes	3.10 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`F5FF774F0C52797DC0B5B074D91D548A`
`.pdata`	`0x0006e000`	13,068 bytes	13,312 bytes	5.59 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`012CCA679E6073E4A57CFE5D0AA7E15B`
`.didat`	`0x00072000`	880 bytes	1,024 bytes	3.07 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`8D174B3ED46B18209229717A096F9CE2`
`.rsrc`	`0x00073000`	40,896 bytes	40,960 bytes	6.93 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`8D1A6E4E8FB674FB3CFDC720D5CD0721`
`.reloc`	`0x0007d000`	2,452 bytes	2,560 bytes	5.35 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`3EDFACE8C73D88F866B4E76630300093`

Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 21 (39,560 bytes)

Resource Type	Count	Total Size	Percentage
PNG	1	14,983 bytes	37.9%
RT_ICON	1	14,728 bytes	37.2%
RT_DIALOG	6	2,916 bytes	7.4%
RT_STRING	11	5,038 bytes	12.7%
RT_GROUP_ICON	1	20 bytes	0.1%
RT_MANIFEST	1	1,875 bytes	4.7%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

The robuxs gratisروبوكس مجاني.exe File Analysis