SecuriteInfo[.]com[.]BScope[.]TrojanPSW[.]Lumma[.]24265[.]27929[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.BScope.TrojanPSW.Lumma.24265.27929.exe
Size

21.1MB
MD5

3083d98591344f8de192c707f558ceb1
SHA1

f6c389c4754fb18b7e7882c86558ab13a4274e54
SHA256

81a90955c9c9f1af847a42d9864dd1f65da3aecfddfc5ad8c9e135fe18d10b4c
SHA512

d2fa07ff61d60b25b851b42b53ca8270f4b46414f42f89702a7501746c6056014e584ef3ff38c91675d9a7b10ba6b7417fcd156c7c4c956a3281031a2db8cd4e
SSDEEP

393216:PF2fHPGV+S8vSzvW3BZYrfANI6MxW3QIIcEZgpQ/ajlUs9wYxR6JRjTJ:PF2/OV+SLWY7M6xK5IcxQ/ajlUsjujTJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.BScope.TrojanPSW.Lumma.24265.27929.exe

Files

SecuriteInfo.com.BScope.TrojanPSW.Lumma.24265.27929.exe
.exe windows:6 windows x86 arch:x86

4a1016ca782fc6652cdb42fa414cea03

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetEnvironmentVariableA
GetDiskFreeSpaceA
GetTempPathA
GetCurrentProcess
OpenProcess
GetModuleFileNameA
VerifyVersionInfoW
MultiByteToWideChar
GetCurrentDirectoryA
LocalFileTimeToFileTime
SetFileTime
SystemTimeToFileTime
WriteConsoleW
CreateFileW
DecodePointer
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
HeapReAlloc
HeapSize
SetFilePointerEx
GetStringTypeW
SetStdHandle
GetProcessHeap
VerSetConditionMask
WriteFile
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
LCMapStringW
GetFileType
HeapAlloc
HeapFree
GetStdHandle
GetModuleFileNameW
ExitProcess
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
LoadLibraryExW
FreeLibrary
TlsFree
GetWindowsDirectoryA
GetSystemDirectoryA
CopyFileA
FindResourceA
SizeofResource
LockResource
LoadResource
FreeEnvironmentStringsW
GetLastError
SetFilePointer
ReadFile
GetFileSize
GetFileAttributesExA
CreateDirectoryA
CreateFileA
MoveFileExA
GetProcAddress
GetModuleHandleA
CreateProcessA
GetExitCodeProcess
TerminateProcess
DeleteFileA
Sleep
CloseHandle
RemoveDirectoryA
GetFileAttributesA
FindNextFileA
FindFirstFileA
FindClose
GetEnvironmentStringsW
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
EncodePointer
SetLastError
RaiseException
RtlUnwind
LocalFree
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
UnhandledExceptionFilter
SetUnhandledExceptionFilter

user32

ShowWindow
CallWindowProcA
wsprintfA
SetProcessDPIAware
GetWindowThreadProcessId
GetClassNameA
EnumWindows
FindWindowExA
FindWindowA
DialogBoxParamA
MonitorFromWindow
SystemParametersInfoA
DrawIconEx
LoadImageA
EnumChildWindows
SetClassLongA
GetDlgItem
MessageBoxA
GetWindowTextA
SetWindowTextA
ReleaseDC
GetDC
SetForegroundWindow
EnableWindow
SendDlgItemMessageA
SetDlgItemTextA
EndDialog
CreateDialogParamA
PostMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
LoadStringA
SendMessageA
LoadCursorA
SetWindowLongA
GetWindowLongA
FillRect
DrawFocusRect
SetCursor
GetClientRect
InvalidateRect
EndPaint
BeginPaint
DrawTextA
GetFocus
SetFocus
GetDlgItemTextA

gdi32

DeleteObject
CreateSolidBrush
CreateFontA
CreateFontIndirectA
SetTextColor
SetBkMode
SelectObject
GetDeviceCaps

advapi32

ControlService
GetUserNameA
RevertToSelf
ImpersonateLoggedOnUser
DuplicateTokenEx
OpenProcessToken
OpenServiceA
OpenSCManagerA
CloseServiceHandle
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegEnumKeyExA
RegDeleteValueA
RegCreateKeyExA
RegCloseKey
LookupAccountSidW
FreeSid
AllocateAndInitializeSid

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
ord680
SHFileOperationA
ShellExecuteA
SHGetMalloc
SHGetSpecialFolderLocation
SHChangeNotify

ole32

CoInitializeSecurity
CoCreateInstance
CoInitialize
CoUninitialize
CoInitializeEx

oleaut32

VariantClear
VariantInit
SysFreeString
SysAllocString

shlwapi

PathIsRelativeA
SHDeleteKeyA
PathIsNetworkPathA

Sections

.text
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20.9MB - Virtual size: 20.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a1016ca782fc6652cdb42fa414cea03

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 146KB - Virtual size: 145KB

.rdata Size: 41KB - Virtual size: 41KB

.data Size: 3KB - Virtual size: 14KB

.rsrc Size: 20.9MB - Virtual size: 20.9MB

.text
Size: 146KB - Virtual size: 145KB

.rdata
Size: 41KB - Virtual size: 41KB

.data
Size: 3KB - Virtual size: 14KB

.rsrc
Size: 20.9MB - Virtual size: 20.9MB