loader_starlight[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

loader_starlight.exe
Size

19.3MB
MD5

cfab2d3cb547c786930a1feaf9363f97
SHA1

2872da265cc0878324e4d452caaa555afd9f536c
SHA256

929d7665ce2e8059fc9709ba141880bc3dcb3a451ab854267e4effd763072d83
SHA512

16b9ec88714497a2e591056421a0a540f2da64b34d7e4e267be07757dd73c4cda5cf7bca5e15c73fbbd00d579f6a57141adb8801492a4d3c23dbf24d6f7cc628
SSDEEP

393216:BD/Y0v/l+3RneFvOQkVo0ZQoEMsJVSpjNQ58QIp02jtaf2Oh9SPv8z/mm8yP5gCq:BDQ0nlH6ihnJV+hQeP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
loader_starlight.exe

Files

loader_starlight.exe
.exe windows:4 windows x86 arch:x86

a9c887a4f18a3fede2cc29ceea138ed3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvcrt

malloc
memset
strcmp
strcpy
getenv
sprintf
fopen
fwrite
fclose
__argc
__argv
_environ
_XcptFilter
__set_app_type
_controlfp
__getmainargs
exit

shell32

ShellExecuteA

kernel32

SetUnhandledExceptionFilter

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19.3MB - Virtual size: 19.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ