Behavioral task
behavioral1
Sample
820-163-0x0000000000400000-0x0000000000464000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
820-163-0x0000000000400000-0x0000000000464000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
820-163-0x0000000000400000-0x0000000000464000-memory.dmp
-
Size
400KB
-
MD5
bbc727ebb039b915a3b7f1d228c439ea
-
SHA1
9ca5a52cfa38818313c5d1abab9f784d23821cfa
-
SHA256
952d3eede42f7fe7bc51c5be1b3fdf8d013591638061a52194e6af6b39ec5601
-
SHA512
f1350ce359e83702f7a7452ae0bae0ace1399d5edb89af4925212ee8477a4b88c171591436d7b778ab17516ec5ea0ec344e1427e02c8343b1e0be8aefab63503
-
SSDEEP
6144:B6BxuLFbBYU84EbEKtTDySNd3wu0dlxszXWwak53cMd8QOEUh9Qehgwl3O85uBJc:BExuR9JEbEOFRaWm6L8QVUh9QKfuk
Malware Config
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 820-163-0x0000000000400000-0x0000000000464000-memory.dmp
Files
-
820-163-0x0000000000400000-0x0000000000464000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 335KB - Virtual size: 335KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ