Behavioral task
behavioral1
Sample
29ee5892e2f77262da4dfe921ee6ca55.exe
Resource
win7-20231129-en
General
-
Target
29ee5892e2f77262da4dfe921ee6ca55
-
Size
216KB
-
MD5
29ee5892e2f77262da4dfe921ee6ca55
-
SHA1
f2ee2e52e95e9e07c7d9ecc93b8336140d30a9ef
-
SHA256
7b988415327875f089dd0a0c3bfd962316b02bbf0765a6e1c43a90417bb106da
-
SHA512
fbb3db86f287b024e6dac53916d40e2444c58138717a7822991d2ddaf87c8c7baf4a4fb77fbc1b18be41ab1450d254da6fd5862b43d09c91d36a8e6a57f6d81e
-
SSDEEP
3072:R+u4fVtl2PUvZzEMqsdJeLyeM4Nu0mE16op6oaZiVkRmBzh6uJhoK4X:+N2PUB/qs37/vrW6oEmBzcuJhoB
Malware Config
Signatures
-
Detect Lumma Stealer payload V4 1 IoCs
resource yara_rule sample family_lumma_v4 -
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 29ee5892e2f77262da4dfe921ee6ca55
Files
-
29ee5892e2f77262da4dfe921ee6ca55.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
.text Size: 113KB - Virtual size: 112KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 89KB - Virtual size: 289KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE