v5.97.625.zip
- SHA256 707d2add642b6b80374ef5170f4b0da6785b0c2522b72b799809bcbc963a5ed3
Password
1234
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LunaUI_v5.97.625.exe
Resource
win10ltsc2021-20260911-en
windows10-ltsc_2021-x64
4 signatures
150 seconds
General
- Target v5.97.625.zip
- Size 88.8MB
- Sample261029-2twfeatvhy
- SHA256 707d2add642b6b80374ef5170f4b0da6785b0c2522b72b799809bcbc963a5ed3
- MD5 2cc2c966be78f0adf54a1295f1ab9e38
- SHA1 e19991fd893a609c6c1fb8bc0c79cab51b0163a9
- SHA512 36e0499d795747da3fcf596d1fc99f75cd9fcb38801b96a99f2462c6aaac093545e8fe0d49d914469742b612bcea70a9124154fefca1a72942b543fb14cb1df4
- SSDEEP 1572864:8jiETz8lmJSBD+Cybcxy42Vao8o69ZUWSjeZVXkyrVD9Vm3GnZr8gP56FEF1bjjq:QnwmuD+Cybcxy42oxujev0kVAiZDv7Xq
- TLSH T1E81833D807DD14B4343DD691E014D6A992C81E7EAE14CFF4ECE36A8B8DA0960F0D6E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack002/LunaUI_v5.97.625.exe
File Explorer
-
v5.97.625.zip.zip 88.8MB
-
v5.97.625.zip.zip 88.8MB
-
LunaUI_v5.97.625.exe.exe 92.0MB
v5.97.625.zip
- SHA256 da44752a7ac96ba746b882ac08b6709a516a852f743032dbf6b25f70f27a411c
- MD5 48cb709cdb28a78292781bd41f2c4004
- SHA1 ce3b5530dd2d280ae3f2630a4dc5aa7bf8f9cda9
- SHA512 18286c85c098dc206c04802babe5ebfc2c55d38ba851a3537a56cbe8bb4a6df1f59a79125cb19950ae377e6e7162880424fb4a76189582aff1c665b1c7eceec2
- SSDEEP 1572864:BmSnrY9aVi7ngI4JSPOwbqS8a+5/+YIP6RXhycHbnxbqB+D7hYGrxCZElhXJbvin:lIaongI4JSPOwOX2P6VIKb++7xL/t72
- TLSH T10718339C46D854B4B47DE264F014C57596C81E2EAE149FF0ECE3AACF89B0860F0D6E79
- MD5 SHA1 SHA512 SSDEEP TLSH
Password
1234
LunaUI_v5.97.625.exe
- IMPHASH d42595b695fc008ef2c56aabd8efd68e
- SHA256 236c2ec1e583ddba455713d5c0b083826aa2ac14f956ddaaed0657167b6ebe33
- MD5 8e55ff4a5cb3084a21389a09fafaa8e0
- SHA1 b697ca96422223bbfdddec5e1c0f847ab7047cb3
- SHA512 4b0546063739b97d991e40c755b2a8ee70a2db6b68873ba553de9773f76e986ad2d8e0efdbcd5e6157f2564d98f6f89febcd03cad9b962d0a98fd66508a93f15
- SSDEEP 1572864:kEMJVobcdI5Z+qcLstcAJG8G4cRHWyqP5T50KH7PrnA5qrjViANrUZivpT3jR8SM:IGcOZ+qcLstcAYhsPVKun46jRnxTdM
- TLSH T12C2833077EE455AAD06BD239D0AB521277B43C0D973077E31F80AA382E72BD469B9F14
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
Password
1234
PE Signature issue
Digest
3b:96:11:73:42:56:56:48:9a:49:89:4a:6e:da:77:dd:aa:65:97:ee:45:01:74:cb:5a:0d:25:9d:34:cd:26:5f
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Silver Stone,O=Silver Stone,C=US
Chains
Oct 29, 2026
CN=Silver Stone,O=Silver Stone,C=US
Subject
CN=Silver Stone,O=Silver Stone,C=US
Serial Number
45:25:be:d4:cb:da:2d:6c:72:a8:77:c3:21:17:f2:35
Issuer
CN=Silver Stone,O=Silver Stone,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Oct 22, 2026 - Oct 29, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2026 1,O=DigiCert\, Inc.,C=US
Serial Number
08:4f:dc:33:4f:7e:45:4e:db:c3:0f:8f:f9:92:18:35
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Aug 5, 2026 - Nov 4, 2037
Minor OS version
1
Major OS version
6
Entry point
466304
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.0MB
Virtual Size
2.0MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
66KB
Virtual Size
366KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
23KB
Virtual Size
22KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
19KB
Virtual Size
18KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
131KB
Virtual Size
130KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ