MoonMenu[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

MoonMenu.exe
Size

20KB
MD5

31fa556ad6229342382ad43a11871697
SHA1

27f06d2a5f9719a926283d17dbf730f571b58f0a
SHA256

f8a31bc4201e894e8d0b0fd0eabcca50f3e7baff50700d9de09014a41a0c2035
SHA512

8fa301b375376f6869cd9cc7a57dffc469b4d9c0e7dac76ddf3e91d14ae5a0839c4616c72544fe8f02ee5d75fdbab7787e6c0c6144c088827bb59f5802936b0d
SSDEEP

384:RGydNIzoOPe/YYYpWsLG63pzD2ILmLOvl7EHVYykvwKwq6uDE743iZ1E74j:RGyj3gXpWA28yOvlgHC2/Zo+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MoonMenu.exe

Files

MoonMenu.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\User\Downloads\menu\WindowsFormsApp1\obj\Debug\MoonMenu.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ