moonshineudcs2[.]exe

Resubmissions

29/07/2026, 13:43

260729-q1hx4svgqb5

29/07/2026, 13:37

260729-qw645shk215

Sharing

Copy URL Twitter E-mail

General

Target
moonshineudcs2.exe
Size 1.1MB
Sample260729-qw645shk21
SHA256 8853d513f0b463e0bec7fe18878ad81ad58c79ec56bfa34500cb9e2150c6eb37
MD5 1e80f951cf8c3ce6d0e5f53693dbbc94
SHA1 4a073ce1a9b95a7da782703e9a46d0982d624d9d
SHA512 af778857a80edbb9837411aba4d74dbeec342595b3d302cb30fda5b03ccadeaa7b7bee64803819b5454fa7f90753d28a85c14027a3b50f467506fb0b2f6cf797
SSDEEP 24576:59WZ5MRav16lT6lV08ouzDbpJHiIIUnS:KMcvsGlV3LC2n
TLSH
T1E945AF4D77B881F8D06BE575EA82650FFA34745B0B2049EB83E00E591F636E49B7B702
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
moonshineudcs2.exe

File Explorer

moonshineudcs2.exe

.exe 1.1MB

moonshineudcs2.exe

IMPHASH 31f269d998720f05495e3dca48c5499a
SHA256 8853d513f0b463e0bec7fe18878ad81ad58c79ec56bfa34500cb9e2150c6eb37
MD5 1e80f951cf8c3ce6d0e5f53693dbbc94
SHA1 4a073ce1a9b95a7da782703e9a46d0982d624d9d
SHA512 af778857a80edbb9837411aba4d74dbeec342595b3d302cb30fda5b03ccadeaa7b7bee64803819b5454fa7f90753d28a85c14027a3b50f467506fb0b2f6cf797
SSDEEP 24576:59WZ5MRav16lT6lV08ouzDbpJHiIIUnS:KMcvsGlV3LC2n
TLSH
T1E945AF4D77B881F8D06BE575EA82650FFA34745B0B2049EB83E00E591F636E49B7B702
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

560836

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\Users\aceta\Downloads\cs2 project (4)\cs2 project\x64\Release\moonshineudcs2.pdb

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

dwmapi

DwmExtendFrameIntoClientArea

kernel32

SetConsoleTextAttribute SetConsoleTitleA GetCurrentProcess GetStdHandle VirtualAlloc TerminateProcess GetModuleFileNameW GetProcessId Thread32Next GetEnvironmentVariableW Thread32First CreateMutexA GetVolumeInformationA CreateFileW lstrcmpA GetSystemDirectoryW UnmapViewOfFile GetModuleHandleA OpenProcess CreateToolhelp32Snapshot Sleep GetLastError Process32NextW GetCurrentThread LoadLibraryA DeleteFileA Process32FirstW CloseHandle GetWindowsDirectoryA Module32FirstW AddVectoredExceptionHandler GetThreadContext SetCurrentDirectoryW VirtualLock GetProcAddress ExitProcess ReadProcessMemory GetCurrentProcessId GetModuleHandleW FlushInstructionCache GetConsoleWindow Module32NextW SetProcessWorkingSetSize CreateFileMappingW MapViewOfFile AllocConsole VirtualQuery GetDriveTypeW OpenThread IsDebuggerPresent GetComputerNameA CheckRemoteDebuggerPresent MultiByteToWideChar GlobalAlloc GlobalFree GlobalLock WideCharToMultiByte GlobalUnlock GetLocaleInfoA QueryPerformanceFrequency VirtualProtect QueryPerformanceCounter SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose HeapReAlloc ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetTimeZoneInformation EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW CompareStringW GetTimeFormatW GetDateFormatW FlsFree FlsSetValue FlsGetValue FlsAlloc HeapFree HeapAlloc GetFileType SetFilePointerEx GetFileSizeEx WriteFile ReadFile GetModuleHandleExW FreeLibraryAndExitThread ExitThread CreateThread LoadLibraryExW TlsFree TlsSetValue TlsGetValue TlsAlloc InitializeCriticalSectionAndSpinCount SetLastError RaiseException GetModuleFileNameA GetProcessHeap RtlUnwind RtlPcToFileHeader RtlUnwindEx InitializeSListHead GetStartupInfoW IsProcessorFeaturePresent SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind SetStdHandle HeapSize WriteConsoleW SetEndOfFile FreeLibrary GetCurrentThreadId ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive SleepConditionVariableSRW InitializeCriticalSectionEx GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx WakeAllConditionVariable GetStringTypeW GetCPInfo RtlCaptureContext RtlLookupFunctionEntry

user32

SendInput GetCursorPos GetDesktopWindow RegisterClassExA DestroyWindow UnregisterClassA GetKeyState ScreenToClient ClientToScreen GetKeyboardLayout SetCursor GetClientRect SetCursorPos OpenClipboard CloseClipboard EmptyClipboard GetClipboardData SetClipboardData GetWindowThreadProcessId GetSystemMenu GetWindowRect LoadCursorW SetWindowPos DeleteMenu GetSystemMetrics ShowWindow GetAsyncKeyState DispatchMessageW SetWindowLongA PeekMessageW GetWindowLongA SetWindowDisplayAffinity MessageBoxA GetForegroundWindow DefWindowProcA CreateWindowExA SetLayeredWindowAttributes BringWindowToTop TranslateMessage LoadIconW UpdateWindow

shell32

ShellExecuteA

ole32

CoInitializeEx CoCreateInstance

winmm

timeBeginPeriod

imm32

ImmReleaseContext ImmGetContext ImmSetCompositionWindow ImmSetCandidateWindow

Name

.text

Size

757KB

Virtual Size

757KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

355KB

Virtual Size

355KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

7KB

Virtual Size

21KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

moonshineudcs2.exe

d3d11

d3dcompiler_47

dwmapi

kernel32

user32

shell32

ole32

winmm

imm32

generic