lua5[.]1[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

lua5.1.exe
Size

20KB
MD5

da0732145ff47922aacaa92dbd41508f
SHA1

c4333f2440e333c9cef8c46fa2fd09f6b9c31d38
SHA256

301cacf6f78935f5abcc9abaf022f051f4df5f79f48a1a63532021bb162d8dd3
SHA512

9254b839728bdfe55581866a0222b70e90a9eaac3182b089f3dc819c458ba62533c301ab9f051b605c6b494d297ea7e9338f839991bc62f6454537f4f3b87bd8
SSDEEP

96:ppvIJLdfh+PRGRg1yUfmMmudVzbgZS0LEZDOM7kRP4oynXpE37SXny:p9gU5IlU9VgZSeE1R7yP4oynm37Si

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lua5.1.exe

Files

lua5.1.exe
.exe windows:4 windows x86

a73023631b48d1336638993d30e2593b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

lua5.1

lua_objlen
lua_pushstring
lua_setfield
luaL_loadbuffer
lua_createtable
luaL_checkstack
lua_pushlstring
lua_concat
lua_pushfstring
lua_getfield
lua_pushvalue
lua_pushinteger
lua_call
luaL_error
lua_sethook
lua_gettop
lua_pushcclosure
lua_insert
lua_pcall
lua_remove
luaL_loadfile
lua_touserdata
lua_gc
luaL_openlibs
lua_type
lua_tolstring
lua_settop
luaL_newstate
lua_cpcall
lua_rawseti
lua_close

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_XcptFilter
_exit
getenv
fgets
strstr
fputs
signal
_isatty
fprintf
_iob
fflush

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ