Lutetium[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Lutetium.exe
Size

250KB
MD5

73d444ef98ea3bafe5d5abc33cd87515
SHA1

f995876e720d9e6d5a5f13fa7e2b6822b6904d24
SHA256

fd7a0b8dc6f5d6053d1206cba9a7752fd7d10172b4e86b71a2fd88b991b86148
SHA512

43fa73090eaa0cb2bb8e99a6d987f56f7fdc7805ae36657e70bd948819a6b5aeba2e80c783c2334cf5afa21c2dd72a7e9882467a020509a5496cad2aeed37dca
SSDEEP

3072:kYCwCMp9KsSqKs8sLCiy5VFQ9/vZRxlPQnzcdT9iG/FltD83I6xc0bigqdSLh6Ss:hqPsL4XWRPdT9n/FQ/O0GgqdSFQH5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lutetium.exe

Files

Lutetium.exe
.exe windows:6 windows x86 arch:x86

99d11ed6611f84c863dc4e1b63066b14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\s-sch\source\repos\WindowsProject3\Release\WindowsProject3.pdb

Imports

kernel32

IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
SetUnhandledExceptionFilter
GetTickCount
ExitProcess
CreateThread
IsProcessorFeaturePresent
CloseHandle
TerminateThread
Sleep
VirtualAlloc
GetModuleHandleW
UnhandledExceptionFilter

user32

ReleaseDC
InvalidateRect
GetDesktopWindow
GetWindowDC
GetWindowRect
LoadIconW
DrawIcon
GetSystemMetrics
MessageBoxW
GetDC

gdi32

CreateCompatibleBitmap
SelectObject
CreateCompatibleDC
PatBlt
BitBlt
CreateHatchBrush
GetBitmapBits
DeleteDC
SetTextColor
TextOutA
SetBitmapBits
SetBkMode
LineTo
CreatePen
StretchBlt
CreateBitmap
CreateEllipticRgn
CreateSolidBrush
DeleteObject
SelectClipRgn
Rectangle
PlgBlt

winmm

waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutWrite
waveOutUnprepareHeader

vcruntime140

memset
__current_exception_context
__current_exception
_except_handler4_common

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_cexit
_c_exit
_initialize_onexit_table
_seh_filter_exe
_set_app_type
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_initialize_narrow_environment
_configure_narrow_argv
_register_thread_local_exe_atexit_callback

api-ms-win-crt-math-l1-1-0

__setusermatherr
_libm_sse2_cos_precise
_libm_sse2_sin_precise

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 984B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 226KB - Virtual size: 226KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

99d11ed6611f84c863dc4e1b63066b14

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winmm

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 15KB - Virtual size: 15KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 984B

.rsrc Size: 226KB - Virtual size: 226KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 15KB - Virtual size: 15KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 984B

.rsrc
Size: 226KB - Virtual size: 226KB

.reloc
Size: 1KB - Virtual size: 1KB