lumma[.]exe | Triage

Sharing

General

Target

lumma.exe
Size

323KB
MD5

0aff0c95dcc533728c4db36323234bc7
SHA1

7934bc0c7c0d3aef95a3ce02dae7ba18db09d49a
SHA256

1d95a1b070d3a22eeb4ddbc8a955e66fea8b8cbe746806b898e01de744b4b2f3
SHA512

2455b8c683caeae381f865f8ca69cec7334dbf60e3b9e071557ad64e5dbd4e9f000e21209201b5a6b7145cd6127229b0f9362bf7e8245d12c355715df40fe305
SSDEEP

6144:Xs4mIjh5dosTbi6H2SDwyMXOUjDDL9HBI4w0EPbWYT9o4WnPjQOSpppbddo3beLN:9jh5GiFSX9k4w0absnApppbdRdpupun3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lumma.exe

Files

lumma.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ