LuaObfuscator[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LuaObfuscator.exe
Size

210KB
MD5

c01337316868f38f9f6f253696600d18
SHA1

f1b0927f5560d1055009edadaec727c183989960
SHA256

3b9163b231d40179d6a7389544b8c5653b9f1fa26a6b8ee8ac96142ad011fdaf
SHA512

fbfea8f7cc17eda9bbbb124acc25428bb5e8e987f30a467cc899767d552c749e8d14b812cc93883cd1ab5bea4c712cab089d7b082ea2c706712170b1a3998053
SSDEEP

3072:VxG22gaxH2zd+EIduBmoiaOK2JDxd3EETy+Us2K/dgcoLJjVMY3I6ITHUnjeU:Vx7axHUd+EauBmo6H50ET+u/d+pTu0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LuaObfuscator.exe

Files

LuaObfuscator.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 206KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ