Static task
static1
Behavioral task
behavioral1
Sample
Lunar IPS.exe
Resource
win7-20220901-en
Behavioral task
behavioral2
Sample
Lunar IPS.exe
Resource
win10v2004-20221111-en
General
-
Target
Lunar IPS.exe
-
Size
196KB
-
MD5
2853266dfe43ba8a576c5a2464408f7c
-
SHA1
05673fb0a502ee2db11874e1dfe1c7733ccdb668
-
SHA256
64a43993e14d62e6d91eb63575a73323c04c4ae8957958485eeccda4131b9883
-
SHA512
39e8def502be0c7c88479ea3925a591922eaf1216e9f45f2eaff26b8af9a02d3bebdd33521c10aa931755fe2a59f7e81e69653d2372db3df0521f3d0c04be125
-
SSDEEP
3072:dSfIXCSAuS7htHMbidJLkHju8fylQ9txYSQUZ:cfIXCn52i/LkDWlQHZ
Malware Config
Signatures
Files
-
Lunar IPS.exe.exe windows x86
693edc83a20dd0e90d5319efc54175f2
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
LCMapStringW
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameA
GetModuleFileNameW
CreateFileW
MultiByteToWideChar
GetCommandLineW
GetCurrentDirectoryA
LCMapStringA
FindFirstFileA
CreateFileA
GetCurrentDirectoryW
WideCharToMultiByte
FindFirstFileW
IsValidCodePage
LoadLibraryW
SetFileAttributesA
LoadLibraryA
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
SetFileAttributesW
WriteConsoleW
WriteConsoleA
InitializeCriticalSection
GetOEMCP
GetACP
GetCPInfo
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFullPathNameA
GetFullPathNameW
HeapSize
RtlUnwind
FlushFileBuffers
Sleep
ExitProcess
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
SetStdHandle
GetConsoleMode
GetConsoleCP
DeleteCriticalSection
SetHandleCount
GetCurrentProcess
GetFileSize
FreeLibrary
GetProcAddress
GetStdHandle
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoA
GetProcessHeap
GetConsoleOutputCP
FreeConsole
GetVersionExA
SetConsoleOutputCP
GetFileType
GetModuleHandleA
SetEndOfFile
CloseHandle
SetFilePointer
WriteFile
ReadFile
GetTimeZoneInformation
GetCommandLineA
GetDriveTypeA
GetDriveTypeW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileInformationByHandle
PeekNamedPipe
GetLastError
HeapFree
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
HeapReAlloc
user32
CheckMenuItem
DefWindowProcW
PostMessageA
CallWindowProcW
GetWindowTextW
DialogBoxParamA
SetWindowTextW
CreateWindowExA
SetWindowLongW
CreateDialogParamA
RegisterClassExA
CreateDialogParamW
RegisterClassExW
AppendMenuA
GetWindowTextA
CreateWindowExW
MessageBoxW
GetActiveWindow
SetWindowLongA
SetWindowTextA
AppendMenuW
LoadImageA
DialogBoxParamW
GetSystemMetrics
SendMessageA
IsDialogMessageA
TranslateMessage
GetDlgItem
EndDialog
GetMessageA
GetCursorPos
PostQuitMessage
CheckDlgButton
ShowWindow
DispatchMessageA
KillTimer
DestroyWindow
CallWindowProcA
DefWindowProcA
GetSystemMenu
SetTimer
comdlg32
CommDlgExtendedError
GetSaveFileNameW
GetSaveFileNameA
GetOpenFileNameW
GetOpenFileNameA
advapi32
RegSetValueExW
RegQueryValueExW
RegQueryValueExA
RegCreateKeyExW
RegSetValueExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegCloseKey
Sections
.text Size: 88KB - Virtual size: 87KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 59KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 78KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ