LunarInjector[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

LunarInjector.exe
Size

215KB
MD5

c85cf27a4e3e8a09ccc5ca8477cdf0f4
SHA1

162e4f456a84dad07fb28c076f81e3c12d79ddcc
SHA256

b2a55bf34475ee06d90aa8679b45ec38fecfddcd21a3bbd515e3a81ba6f6e577
SHA512

6d263266e8abed349228477076cac2a421f9b5c152541c6ddb8ff71793dc9656fa8f8b9c6ccb15a5b98558de77a3731cff868797a214ee4b69db405953920ca0
SSDEEP

3072:zGqjIoatajuHs1kPspelIUk1hp7wNvAHXw/PttEuW9EHKk5bNXYXlo4KF74AZqRB:rjbZNf1hp7wNsXw/E2FV4Wv4RI0Kp2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LunarInjector.exe

Files

LunarInjector.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Thiago\Desktop\IGCSInjectorUI\src\obj\Release\IGCSInjectorUI.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 183KB - Virtual size: 182KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ