Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
Overview
overview
7Static
static
3GreenLuma....er.zip
windows7-x64
1GreenLuma....er.zip
windows10-2004-x64
1GreenLuma....er.exe
windows7-x64
1GreenLuma....er.exe
windows10-2004-x64
1GreenLuma....er.exe
windows7-x64
7GreenLuma....er.exe
windows10-2004-x64
7main.pyc
windows7-x64
3main.pyc
windows10-2004-x64
3GreenLuma....on.dll
windows7-x64
1GreenLuma....on.dll
windows10-2004-x64
1GreenLuma....ME.txt
windows7-x64
1GreenLuma....ME.txt
windows10-2004-x64
1GreenLuma....on.ico
windows7-x64
3GreenLuma....on.ico
windows10-2004-x64
3Behavioral task
behavioral1
Sample
GreenLuma.2020.Manager.zip
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
GreenLuma.2020.Manager.zip
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
GreenLuma.2020.Manager/GL2020 Updater.exe
Resource
win7-20240419-en
Behavioral task
behavioral4
Sample
GreenLuma.2020.Manager/GL2020 Updater.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral5
Sample
GreenLuma.2020.Manager/GreenLuma 2020 Manager.exe
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
GreenLuma.2020.Manager/GreenLuma 2020 Manager.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
main.pyc
Resource
win7-20240221-en
Behavioral task
behavioral8
Sample
main.pyc
Resource
win10v2004-20240611-en
Behavioral task
behavioral9
Sample
GreenLuma.2020.Manager/Newtonsoft.Json.dll
Resource
win7-20240508-en
Behavioral task
behavioral10
Sample
GreenLuma.2020.Manager/Newtonsoft.Json.dll
Resource
win10v2004-20240611-en
Behavioral task
behavioral11
Sample
GreenLuma.2020.Manager/README.txt
Resource
win7-20240611-en
Behavioral task
behavioral12
Sample
GreenLuma.2020.Manager/README.txt
Resource
win10v2004-20240226-en
Behavioral task
behavioral13
Sample
GreenLuma.2020.Manager/icon.ico
Resource
win7-20240508-en
Behavioral task
behavioral14
Sample
GreenLuma.2020.Manager/icon.ico
Resource
win10v2004-20240611-en
Target
GreenLuma.2020.Manager.zip
Size
17.5MB
MD5
fe45aa6adcfc238d941836f35e18ad32
SHA1
dec9c2b679effe2bd505690e28532946ae127be3
SHA256
19012c229ebe20187fc88d36b6568a26aa205236e203ec0ca5d67d037ad9ac24
SHA512
25f600905f737cb9a45d6388f8608e6fde09d2deb3305b43a36a30effae60b97f42a39b3062f49a837f12deb5178844cacf1e578b6a405d0b1393886c3d698e4
SSDEEP
393216:9uZTvLPd8PO6lk/DZ05WxVQCJqtCoeWV5s/vFtAJ/stMsyIcGxJoL:9e8PO6lO905OVQ4oJbSFtAGR3/K
Processes:
resource | yara_rule |
---|---|
static1/unpack001/GreenLuma.2020.Manager/GreenLuma 2020 Manager.exe | pyinstaller |
Checks for missing Authenticode signature.
Processes:
resource |
---|
unpack001/GreenLuma.2020.Manager/GL2020 Updater.exe |
unpack001/GreenLuma.2020.Manager/GreenLuma 2020 Manager.exe |
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
_CorExeMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
CreateWindowExW
MessageBoxW
MessageBoxA
SystemParametersInfoW
DestroyIcon
SetWindowLongPtrW
GetWindowLongPtrW
GetClientRect
InvalidateRect
ReleaseDC
GetDC
DrawTextW
GetDialogBaseUnits
EndDialog
DialogBoxIndirectParamW
MoveWindow
SendMessageW
ord380
GetACP
IsValidCodePage
GetStringTypeW
GetFileAttributesExW
FlushFileBuffers
GetCurrentDirectoryW
GetOEMCP
GetCPInfo
GetModuleHandleW
MulDiv
GetLastError
SetDllDirectoryW
GetModuleFileNameW
GetProcAddress
GetEnvironmentStringsW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
CreateProcessW
GetStartupInfoW
FreeLibrary
LoadLibraryExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
SetEndOfFile
GetCommandLineW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RaiseException
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
SetStdHandle
SetConsoleCtrlHandler
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
CompareStringW
LCMapStringW
OpenProcessToken
GetTokenInformation
ConvertStringSecurityDescriptorToSecurityDescriptorW
ConvertSidToStringSidW
SelectObject
DeleteObject
CreateFontIndirectW
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
/_/Src/Newtonsoft.Json/obj/Release/net45/Newtonsoft.Json.pdb
_CorDllMain
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ