Static task
static1
Behavioral task
behavioral1
Sample
MoonLoader_nigger.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
MoonLoader_nigger.exe
Resource
win10v2004-20221111-en
General
-
Target
MoonLoader_nigger.exe
-
Size
286KB
-
MD5
40010affc527ac2a05fdb56acd88a15e
-
SHA1
66ab3189990424356bd05cb240cecf09a11cb8c5
-
SHA256
4eaab07c708562a4e8175f20b7f58e5862e67691c32b4abdd6dab88e94d4012b
-
SHA512
a71acd10705a618c663b713d6863dc8845aef63ce9604d00cc89f2a5aa78568edfd18ca7f5fb753f04f4e603a3238e2d88b1781312a2785bce1586a5b6cc50e9
-
SSDEEP
6144:aZUPhAKtH9BvO2R6tsmqTlGjY2N4S4zFJ4XwcYUFk3RVSQ:OktH9BvOcWsXk82N4S45WHYfL
Malware Config
Signatures
Files
-
MoonLoader_nigger.exe.exe windows x86
17e51bec475712ee2528d2526fe43ed1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleW
user32
ScrollDC
advapi32
RegOpenKeyExW
mscoree
_CorExeMain
comctl32
PropertySheet
shell32
ShellAboutW
Sections
Size: 43KB - Virtual size: 52KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 241KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: 512B - Virtual size: 18B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ