Behavioral task
behavioral1
Sample
4940-283-0x0000000000400000-0x0000000000465000-memory.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
4940-283-0x0000000000400000-0x0000000000465000-memory.exe
Resource
win10v2004-20230703-en
General
-
Target
4940-283-0x0000000000400000-0x0000000000465000-memory.dmp
-
Size
404KB
-
MD5
9f2a044611b4e35b88f8e8f42854b03c
-
SHA1
0d80d7d61de3fb2f3940a674180c2e888a3c3019
-
SHA256
1d9d5cfc8ad162af6100cf3311f83608dab90bb8b3f41ccf9fc441718dd33970
-
SHA512
1309608d2d5f90c1c35fc533d9ed7e6f39dfb521cf82d28bdc1a2f416df6d03d789f505eb3927b1879f9e4ed21f5ed7a9485ea1ec69934180fb62085bfb341ca
-
SSDEEP
12288:/ZjRgbBd8Cjy+pQMT4C45QHy8ysRt+VD:/62COJMcv/8Rt
Malware Config
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4940-283-0x0000000000400000-0x0000000000465000-memory.dmp
Files
-
4940-283-0x0000000000400000-0x0000000000465000-memory.dmp.exe windows x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 338KB - Virtual size: 338KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ