Static task
static1
Behavioral task
behavioral1
Sample
GreenLuma_2024_x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GreenLuma_2024_x64.dll
Resource
win10v2004-20240226-en
General
-
Target
GreenLuma_2024_x64.dll
-
Size
490KB
-
MD5
ff12defcdfbc2711117f9d44faa0103d
-
SHA1
1123a6d13dfef1fa53586f987800cc3491a4a7b6
-
SHA256
d246e2c2fccb4b2ef0df9c078c807336eee98b34acbfc33d54ccedde299869b3
-
SHA512
63e318539e5d5d35cb00d1d2187130fa06238a90e481b365ed598f8947097bc77f1ad3158db0e473ce0ae850811e05eea9174ad050a4b8ff4a75190af2aeceac
-
SSDEEP
6144:6BNqo6LcEmkEls8iFjcjxvQsakryhQCVi/vpcmoFN7HE3xQyt1m7o1Xt:6io68ccjxQsakryhQS8vpAP7QxQQ15
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource GreenLuma_2024_x64.dll
Files
-
GreenLuma_2024_x64.dll.dll windows:6 windows x64 arch:x64
f4670d47bfced291c00960de68398d42
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
CreateDirectoryW
GetStartupInfoW
ReadFile
GetFileSizeEx
WriteProcessMemory
VirtualProtect
HeapFree
SetLastError
EnterCriticalSection
GetHandleInformation
GetCurrentProcess
WriteFile
GetModuleHandleExW
GetModuleFileNameW
GetProcessId
LeaveCriticalSection
GetEnvironmentVariableW
InitializeCriticalSectionEx
GetEnvironmentVariableA
WaitForSingleObject
CreateFileW
HeapSize
CreateEventW
Sleep
GetLastError
K32GetModuleBaseNameW
SetEvent
DeleteFileW
HeapReAlloc
CloseHandle
GetNativeSystemInfo
FreeConsole
HeapAlloc
GetLocalTime
VirtualProtectEx
HeapDestroy
GetProcAddress
VirtualAllocEx
DeleteCriticalSection
ExitProcess
GetCurrentProcessId
GetProcessHeap
GetModuleHandleW
FlushInstructionCache
CreateRemoteThread
VirtualFreeEx
AllocConsole
LoadLibraryExW
VirtualQueryEx
HeapCreate
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
GetThreadContext
SetThreadContext
OpenThread
WriteConsoleW
RaiseException
FreeLibrary
LoadLibraryExA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
SetFilePointerEx
GetConsoleMode
ReadConsoleW
GetStdHandle
GetFileType
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
GetTimeZoneInformation
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
FlushFileBuffers
GetConsoleOutputCP
SetEndOfFile
Sections
.text Size: 331KB - Virtual size: 331KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 107KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ