Static task
static1
Behavioral task
behavioral1
Sample
lua-executor-by-tiago-main.zip
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
lua-executor-by-tiago-main.zip
Resource
win10v2004-20240802-en
General
-
Target
lua-executor-by-tiago-main.zip
-
Size
1.5MB
-
MD5
b5e9d6b7e762182e112471bd11cb97e6
-
SHA1
bb4fbd2ae81948c9f8c5a8e5f52ebae15f92a93f
-
SHA256
9cc731b8a3b834277cba219e2bdba18bb97a5d2406be18dbcf04cdec04c6f531
-
SHA512
55276d6cb8198d5e9fea8aaf9aaf1194232f4ab7acb8bf736a3f5e83d740055ca2aa6167631b52a0e75283875ff1b5187b43f236ce35eb4e7ff350f23466ac72
-
SSDEEP
24576:9982p0Qz6SQjJoqgvdGZD+wrESiGxuXfltyRwkpE2I0gxiO521UcgazBGoG:998pvSQjQvEZDJrVx6fojB22LZG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/lua-executor-by-tiago-main/Loader.exe
Files
-
lua-executor-by-tiago-main.zip.zip
-
lua-executor-by-tiago-main/LICENSE
-
lua-executor-by-tiago-main/Loader.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
_OL;9/ Size: 300KB - Virtual size: 300KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
-
lua-executor-by-tiago-main/README.md
-
lua-executor-by-tiago-main/imgui/imconfig.h
-
lua-executor-by-tiago-main/imgui/imgui.cpp
-
lua-executor-by-tiago-main/imgui/imgui.h
-
lua-executor-by-tiago-main/imgui/imgui_demo.cpp
-
lua-executor-by-tiago-main/imgui/imgui_draw.cpp
-
lua-executor-by-tiago-main/imgui/imgui_impl_dx11.cpp
-
lua-executor-by-tiago-main/imgui/imgui_impl_dx11.h
-
lua-executor-by-tiago-main/imgui/imgui_impl_win32.cpp
-
lua-executor-by-tiago-main/imgui/imgui_impl_win32.h
-
lua-executor-by-tiago-main/imgui/imgui_internal.h
-
lua-executor-by-tiago-main/imgui/imgui_tables.cpp
-
lua-executor-by-tiago-main/imgui/imgui_widgets.cpp.vbs
-
lua-executor-by-tiago-main/imgui/imstb_rectpack.h
-
lua-executor-by-tiago-main/imgui/imstb_textedit.h
-
lua-executor-by-tiago-main/imgui/imstb_truetype.h
-
lua-executor-by-tiago-main/lib/proxine.lib
-
lua-executor-by-tiago-main/minhook/MinHook.def
-
lua-executor-by-tiago-main/minhook/MinHook.h
-
lua-executor-by-tiago-main/minhook/Nouveau Archive WinRAR.rar.rar
-
lua-executor-by-tiago-main/minhook/buffer.c
-
lua-executor-by-tiago-main/minhook/buffer.h
-
lua-executor-by-tiago-main/minhook/hde/hde32.c
-
lua-executor-by-tiago-main/minhook/hde/hde32.h
-
lua-executor-by-tiago-main/minhook/hde/hde64.c
-
lua-executor-by-tiago-main/minhook/hde/hde64.h
-
lua-executor-by-tiago-main/minhook/hde/pstdint.h
-
lua-executor-by-tiago-main/minhook/hde/table32.h
-
lua-executor-by-tiago-main/minhook/hde/table64.h
-
lua-executor-by-tiago-main/minhook/hook.c
-
lua-executor-by-tiago-main/minhook/trampoline.c
-
lua-executor-by-tiago-main/minhook/trampoline.h