luna-executor.zip
- SHA256 ab27b1c64e84f934ce0441c1707da19df126d3196fb7c5ad25e42ca9d76ad90c
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
luna-executor/RageInject.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
luna-executor/RageInject.exe
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
10 signatures
150 seconds
General
- Target luna-executor.zip
- Size 3.0MB
- Sample260818-phex3asara
- SHA256 ab27b1c64e84f934ce0441c1707da19df126d3196fb7c5ad25e42ca9d76ad90c
- MD5 d6d6cdf9863f497afd36cb9efd7a2904
- SHA1 85cdf86e4f598278019aea1337200cf5cb09a776
- SHA512 416fd082cef2d3c028b3ae59d2c35a22014f1e8eb4c16e14331d408ef851a92be98545765f07badd36373e624d61047f89374191c28705202e44bb20b3303770
- SSDEEP 6144:xiZIj3NqHErkSJkiwCpFOzAAbzE0Ho4itU9eIwlDobcv+0WxwC0JW3by+V0ogcKo:xZj3NOErvqit0HXzvCywz+yyEw
- TLSH T1B4E5A1D63A69C9AFD3B3A7B74494E23106F81C446732C61A4EF0EA83FC525452F769E0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/luna-executor/RageInject.exe
File Explorer
-
luna-executor.zip.zip 3.0MB
-
luna-executor/RageInject.exe.exe 3.0MB
luna-executor/RageInject.exe
- IMPHASH 3f2dac167bea989bce4e92eea0ccde44
- SHA256 1d3cf0b51eb0146a085495d67553ba5ebbcace5606b2950bad9bcc735521d117
- MD5 5e5841377b4be7a523880e244fdcbb27
- SHA1 140fe4ae56bd22ae4ad02b2f67afff6a2aa0d325
- SHA512 78624d9be2b2b571825442d9aee1f58a6a3ad9d8c161aae083d292bbbc22978af37605160ff64c26883269904b54976ffe6c6156b0892bdebb233a19fa75a692
- SSDEEP 6144:jiZIj3NqHErkSJkiwCpFOzAAbzE0Ho4itU9eIwlDobcv+0WxwC0JW3by+V0ogcK7:jZj3NOErvqit0HXzvCywz+yyE
- TLSH T125E5A1D63A69C9AFD3B3A7B74494E23106F81C446732C61A4EF0EA83FC525452F769E0
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
8528
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
LoadIconW
LoadCursorA
PtInRect
FillRect
MapWindowPoints
GetWindowRect
GetClientRect
GetWindowTextW
InvalidateRect
UpdateWindow
DrawTextW
GetSystemMetrics
GetDlgItem
SetWindowPos
ShowWindow
CreateWindowExW
RegisterClassW
PostQuitMessage
DefWindowProcW
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
TrackMouseEvent
gdi32
MoveToEx
SetTextColor
SetBkMode
SelectObject
LineTo
FillRgn
DeleteObject
CreateSolidBrush
CreateRoundRectRgn
CreatePen
CreateFontW
comctl32
InitCommonControlsEx
shell32
ShellExecuteW
kernel32
GetProcessHeap
LCMapStringW
VirtualProtect
HeapSize
HeapReAlloc
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
SetFilePointerEx
CreateFileW
WriteConsoleW
CloseHandle
LoadLibraryExW
RaiseException
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
GetLastError
SetLastError
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
RtlLookupFunctionEntry
EncodePointer
RtlPcToFileHeader
GetStdHandle
WriteFile
GetModuleFileNameW
GetCurrentProcess
ExitProcess
TerminateProcess
FreeLibrary
GetModuleHandleExW
GetProcAddress
IsProcessorFeaturePresent
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
GetFileType
GetStringTypeW
Name
.text
Size
54KB
Virtual Size
54KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
40KB
Virtual Size
40KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
5KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.bigdata
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
362KB
Virtual Size
361KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=142, id=261, version=35222,
count=12, id=260, version=35222,
count=7, id=259, version=35222,
count=9, id=259, version=35721,
count=17, id=260, version=35721,
count=39, id=261, version=35721,
count=11, id=257, version=35222,
count=124, id=1, productName=Unmarked objects,
count=1, id=261, version=36252,
count=1, id=255, version=36252,
count=1, id=258, version=36252,