Behavioral task
behavioral1
Sample
1468-1217-0x0000000000400000-0x00000000004B8000-memory.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
1468-1217-0x0000000000400000-0x00000000004B8000-memory.exe
Resource
win10v2004-20230220-en
General
-
Target
1468-1217-0x0000000000400000-0x00000000004B8000-memory.dmp
-
Size
736KB
-
MD5
868514ee7dd8070c1e437c0a92657e03
-
SHA1
e36091fff4643e8072e12f0887b160f562219909
-
SHA256
16b48b8ace9e1a863f30870374ce7303f7c2c6f467c24d041e2c01d3d5b20ba0
-
SHA512
a37c605bb1193ddefcda136cc86f63242eee3d90dbfb54aa6090b75a2fa8e4ee7012ae21cba9fd92439fe580d21c9015e47aa56fa39eca281ff60620620e683b
-
SSDEEP
12288:QiA9DmoOWY5vbgUAWQSty6WHiAMyI3ygnUsz6cxeXmU/6i7f7gupPQ0:mDRYmUjyrch3ygnDz6cM2Uz7f7S
Malware Config
Signatures
-
Lumma family
Files
-
1468-1217-0x0000000000400000-0x00000000004B8000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 652KB - Virtual size: 651KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.voltbl Size: 512B - Virtual size: 168B
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ