Behavioral task
behavioral1
Sample
2396-3-0x0000000001220000-0x00000000016E1000-memory.exe
Resource
win7-20240903-en
General
-
Target
2396-3-0x0000000001220000-0x00000000016E1000-memory.dmp
-
Size
4.8MB
-
MD5
f8a5b8221dd644ef1c82a4ff13ea885f
-
SHA1
18316201dc07d3897f60b1525354e46b181e034a
-
SHA256
2aa0cd11162889a076717719ae951a8c816fa6fcb654b9e7f5aaa898a4f77d28
-
SHA512
975fd247ada9d53a51b9b1f27d69dbde24b78c998216eee2a9ebc11a54c06a1d33bbf3bef84bdaa8ea925e18ff6d1b976d76f98a1bb3a7aa9388c268429ce247
-
SSDEEP
98304:44L7LrndDg+N1uBSUrc+Qcdoyn2h4545x1jQEbkAx:XX+Fdoyn2hS4BfbkAx
Malware Config
Extracted
lumma
Signatures
-
Lumma family
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 2396-3-0x0000000001220000-0x00000000016E1000-memory.dmp
Files
-
2396-3-0x0000000001220000-0x00000000016E1000-memory.dmp.exe windows:6 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Sections
Size: 151KB - Virtual size: 372KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
xilxpkoi Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
prpkvxxm Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE