Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with Essential
PeID
Microsoft Visual C++ v6.0 DLL
| Name | Value |
|---|---|
| Info | PE Detect: PeReader OK (file layout) |
| Info | Authenticode present at 0x39400 size 7801 bytes |
| Info | Overlay extracted: Overlay_0fb76dc6.bin (413056 bytes) |
LummaEncrypted@00039526 [070615000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@00039535 [120614235959]
UNKNWOWNmalicious
Khuhuhuhu
LummaEncrypted@000398DD [031204000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@000398EC [131203235959]
UNKNWOWNmalicious
Jhuhuhuhu
LummaEncrypted@00039C78 [040716000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@00039C87 [140715235959]
UNKNWOWNmalicious
Mhuhuhuhu
LummaEncrypted@0003A191 [090211000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@0003A1A0 [120211235959]
UNKNWOWNmalicious
Khuhuhuhu
LummaEncrypted@0003A892 [090213104341]
UNKNWOWNmalicious
Jhuhuhuhu
LummaEncrypted@000404B6 [2DF8D04C]
UNKNWOWNmalicious
LummaEncrypted@00041268 [8D8F21B62347274727422C422C]
UNKNWOWNmalicious
??huhuhuhu
LummaEncrypted@0004128A [1A18B6495E665E66A19A5F663902363B9B9748CDA72598CF02BBF20C3D372E810F1D404791]
UNKNWOWNmalicious
D~?/??huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted@000412DB [A7A50BDC15E4A3E5A3E5A3]
UNKNWOWNmalicious
?Ahuhuhuhu
LummaEncrypted@00094C17 [0123456789abcdef]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@00094C3F [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted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
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted@00097018 [7567fff5468f5b682780aea4c2eb6266]
UNKNWOWNmalicious
3???huhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential