Static task
static1
General
-
Target
GreenLuma_2024_x64.dll
-
Size
492KB
-
MD5
070ce6fd8d34fc3fda76f52c425e64ab
-
SHA1
aec7344119d4441db5e86917f7e7d23de116a572
-
SHA256
ef13612d1ef3f13695a4fd1520ae660d001ecad645e73bd0efada52cc1300342
-
SHA512
faea12c03121b5064dea2d03ef530d2565efbae85e441832c24fdcbd8e6ce80a0c2152ae708d7fdccb2485c4af233e33eaeb21b7b664e587e145b3b6d8ad66c9
-
SSDEEP
12288:s3+L2dwa04DF0+FZT/xBlJbhQJbl4Rfo:s3Hf5xBlJbmJOR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GreenLuma_2024_x64.dll
Files
-
GreenLuma_2024_x64.dll.dll windows:6 windows x64 arch:x64
20fd28eb411b2da88dd084c28082815d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
CreateDirectoryW
ReadFile
GetFileSizeEx
WriteProcessMemory
VirtualProtect
HeapFree
SetLastError
EnterCriticalSection
GetHandleInformation
GetCurrentProcess
WriteFile
GetModuleHandleExW
GetModuleFileNameW
GetProcessId
LeaveCriticalSection
GetEnvironmentVariableW
InitializeCriticalSectionEx
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
FreeLibraryAndExitThread
HeapSize
CreateEventW
Sleep
GetLastError
K32GetModuleBaseNameW
DeleteFileW
HeapReAlloc
CloseHandle
GetNativeSystemInfo
FreeConsole
CreateThread
HeapAlloc
GetLocalTime
VirtualProtectEx
HeapDestroy
GetProcAddress
VirtualAllocEx
DeleteCriticalSection
ExitProcess
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FlushInstructionCache
CreateRemoteThread
VirtualFreeEx
AllocConsole
LoadLibraryExW
VirtualQueryEx
HeapCreate
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetThreadContext
SetThreadContext
OpenThread
WriteConsoleW
RaiseException
FreeLibrary
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
SetEndOfFile
Sections
.text Size: 332KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ