lumma | 1528-299-0x0000000000900000-0x0000000000966000-memory[.]dmp | Triage

Sharing

General

Target

1528-299-0x0000000000900000-0x0000000000966000-memory.dmp
Size

408KB
MD5

2065d384a8e670214e2372c6a5804784
SHA1

5e25cad3820e522feb1aacaea62b5c05aef5ccdb
SHA256

e0f7e29f6f3b59ae9d03bfcfe23f58bf64133dce145d09521d91700e8e64fdfe
SHA512

345f2df517a73f1b0d5bbbc0298f4d42cc3a40e7ece42240534a78d9c11312f2b673e7e10fe01d20934f355294960fd4df5c988549b18b54b125accf51f46668
SSDEEP

6144:llg6zLFRZO9aZ5CpTa7eTE3V0Y8DN/fZZTXZ6ogwDyamtkRtkOAerOk8uDDIy:l/zRRpCpWMrZTJ6oLyaEkRtkwzHI

Score

10^/10

lumma

Malware Config

Signatures

Lumma family
lumma

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1528-299-0x0000000000900000-0x0000000000966000-memory.dmp

Files

1528-299-0x0000000000900000-0x0000000000966000-memory.dmp
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 334KB - Virtual size: 333KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

xmddct
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE