LuaPlusC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

LuaPlusC.exe
Size

141KB
MD5

442e3a07b19650b1e533ff1143e8eb31
SHA1

258d1b92838b751f1307c0af064d08d68aa52f7b
SHA256

4c107dfc894a38515c7a8abce34454065700f8e835a740c345053f5ffcfca56e
SHA512

1e86f961d66e2669e8806990edcff17a01a3fb0903c19573c248e4319bd49a0e6c243835387eea0aa393e3885f862a1ce7dfff800446ee8f3e6fb7bca2c0bf6c
SSDEEP

3072:ksPr5x3l6iZHFFWon8ttbjSxqdX5P0NVzdCgposNdkX4p0yzYk0pWmOEG:ksTV62FFifb2xMXKNVzdCakop0yzYhp6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LuaPlusC.exe

Files

LuaPlusC.exe
.exe windows:6 windows x86 arch:x86

1d702861c51c95305be9b967eebc8b02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Tim\Documents\Dev\working\external\LuaPlus\Temp\VC7\Win32\LuaC\Release\LuaC.pdb

Imports

vcruntime140

__std_exception_destroy
__std_exception_copy
_except_handler4_common
memset
__std_type_info_destroy_list
__telemetry_main_return_trigger
__telemetry_main_invoke_trigger
_CxxThrowException
_setjmp3
longjmp
memcpy
strstr
strchr

api-ms-win-crt-runtime-l1-1-0

strerror
_seh_filter_exe
_set_app_type
terminate
_configure_narrow_argv
_initialize_narrow_environment
exit
_initterm
_initterm_e
_exit
_controlfp_s
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_errno
_crt_at_quick_exit
_crt_atexit
_get_initial_narrow_environment
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table

api-ms-win-crt-stdio-l1-1-0

__p__commode
__stdio_common_vsprintf
_set_fmode
ungetc
__acrt_iob_func
fclose
ferror
fopen
fwrite
__stdio_common_vfprintf
putchar
feof
getc
fread

api-ms-win-crt-string-l1-1-0

strncat
isalpha
isprint
strcspn
tolower
strncpy
isdigit
strcoll
isspace
isalnum
iscntrl
isxdigit

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
_set_new_mode
realloc
free

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
localeconv

api-ms-win-crt-convert-l1-1-0

strtoul
strtod

api-ms-win-crt-math-l1-1-0

__libm_sse2_pow
_except1
__setusermatherr

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
TerminateProcess
OutputDebugStringA

Sections

.text
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1d702861c51c95305be9b967eebc8b02

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

kernel32

Sections

.text Size: 123KB - Virtual size: 122KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 512B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 84B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 123KB - Virtual size: 122KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 512B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 84B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 5KB - Virtual size: 4KB