MoonSweepers[.]exe

General

Target
MoonSweepers.exe
Size 651KB
Sample261027-ysrt2sgv5l
SHA256 ba750c977b1de0b588aa0b8105b42fa62ecbf80823d3765152a9cdba86d6ab64
MD5 a7357ebb18bd776b640caa18341351e6
SHA1 a19c13195cbdf395b504282fae16ece6fade5810
SHA512 2d05895dda5fb35a99451181be5c1906585841cbbda56cbfc39d95fbd2169d661fb9eb0b688a4a82a2685e6882c9badb5fe5c1f0417a6053d4e0265f55536593
SSDEEP 3072:twazAjvuMeUwZPRyYzK4IHcUIcLK51TwH996KNmHN4OfRGBT7Xvkgxay:SaMjvuUwZpZUhLK51TwH99No5GhM3
TLSH
T1F5E428C7236AD2B7E6FC8535F09B5154AA178D85517CC0E0A9B1E00ECCE1D6A1B9BFB0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MoonSweepers.exe

File Explorer

MoonSweepers.exe

.exe 651KB

MoonSweepers.exe

IMPHASH a136217cdd3247ff6a8766561064ca0b
SHA256 ba750c977b1de0b588aa0b8105b42fa62ecbf80823d3765152a9cdba86d6ab64
MD5 a7357ebb18bd776b640caa18341351e6
SHA1 a19c13195cbdf395b504282fae16ece6fade5810
SHA512 2d05895dda5fb35a99451181be5c1906585841cbbda56cbfc39d95fbd2169d661fb9eb0b688a4a82a2685e6882c9badb5fe5c1f0417a6053d4e0265f55536593
SSDEEP 3072:twazAjvuMeUwZPRyYzK4IHcUIcLK51TwH996KNmHN4OfRGBT7Xvkgxay:SaMjvuUwZpZUhLK51TwH99No5GhM3
TLSH
T1F5E428C7236AD2B7E6FC8535F09B5154AA178D85517CC0E0A9B1E00ECCE1D6A1B9BFB0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

4708

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

C:\build\output\unity\unity\artifacts\WindowsPlayer\Win_x64_VS2022_VB_MT_nondev_i_r\WindowsPlayer_player_Master_il2cpp_x64.pdb

unityplayer

UnityMain2

kernel32

HeapAlloc WriteConsoleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW CloseHandle RtlUnwindEx GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetStdHandle WriteFile GetModuleFileNameW GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetStdHandle GetFileType GetStringTypeW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetProcessHeap HeapSize HeapReAlloc FlushFileBuffers GetConsoleOutputCP GetConsoleMode SetFilePointerEx CreateFileW

Sharing