Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ v6.0 DLL
2 malicious · 12 files
EXE509e24b5c3cf7e8309e9a3ede717ebcfLumma Stealer
Structure
P7B[Authenticode]_874623c1.p7b
BINOverlay_e4fcfc8c.binLumma Stealer
BINResources
| Name | Value |
|---|---|
| Info | Authenticode present at 0x39400 size 7801 bytes |
| Info | Overlay extracted: Overlay_e4fcfc8c.bin (216448 bytes) |
LummaEncrypted@00039526 [070615000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@00039535 [120614235959]
UNKNWOWNmalicious
Khuhuhuhu
LummaEncrypted@000398DD [031204000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@000398EC [131203235959]
UNKNWOWNmalicious
Jhuhuhuhu
LummaEncrypted@00039C78 [040716000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@00039C87 [140715235959]
UNKNWOWNmalicious
Mhuhuhuhu
LummaEncrypted@0003A191 [090211000000]
UNKNWOWNmalicious
huhuhuhu
LummaEncrypted@0003A1A0 [120211235959]
UNKNWOWNmalicious
Khuhuhuhu
LummaEncrypted@0003A892 [090213104341]
UNKNWOWNmalicious
Jhuhuhuhu
LummaEncrypted@000404B6 [2DF8D04C]
UNKNWOWNmalicious
LummaEncrypted@00041268 [8D8F21B62347274727422C422C]
UNKNWOWNmalicious
??huhuhuhu
LummaEncrypted@0004128A [1A18B6495E665E66A19A5F663902363B9B9748CDA72598CF02BBF20C3D372E810F1D404791]
UNKNWOWNmalicious
D~?/??huhuhuhuhuhuhuhuhuhuhu
LummaEncrypted@000412DB [A7A50BDC15E4A3E5A3E5A3]
UNKNWOWNmalicious
?Ahuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential