Static task
static1
Behavioral task
behavioral1
Sample
MOONCHIL.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
MOONCHIL.exe
Resource
win10v2004-20220812-en
General
-
Target
6a3b4cee59496c81011876e3a00417a49c9c97ccb59d60e78b0973b78effe2e9
-
Size
386KB
-
MD5
463ac85a47127633763c10ee252a60d0
-
SHA1
1699b4a07cfa6e75765b16beca30cf4e7c3d91fb
-
SHA256
6a3b4cee59496c81011876e3a00417a49c9c97ccb59d60e78b0973b78effe2e9
-
SHA512
e7e1c1c3e66261faee126d1cba9b5e6cac91126529d2ced338de41d23f790a370c3eae37ca3c58e4508edf84eb6c8623ec0858eff641c8f0a020cf4e82683119
-
SSDEEP
6144:B+YmJCd542weZ5AAE1gK1qzvc9xXl1XzUZWwMrN2IYWC+q9k8oM5+Lx+:B+bCdi2ws5A1sc3zNwMrN2Ick8r+Lx+
Malware Config
Signatures
Files
-
6a3b4cee59496c81011876e3a00417a49c9c97ccb59d60e78b0973b78effe2e9.zip
-
MOONCHIL.EXE.exe windows x86
7f5fc1fab939a179a49b4099b23d0a25
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI
Imports
kernel32
CreateFileA
CreateProcessA
ExitProcess
MoveFileA
CopyFileA
Sections
CODE Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
DATA Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ