Malicious
PE Executable
MD5:
Size: 0 B
application/x-dosexec
Ctrl + scroll to zoom · drag to pan
Get an AI-generated breakdown of this malware's behaviour, IOCs and recommendations.
AI analysis is available with Essential.
Unlock with EssentialFile
Type
Portable Executable file
Detection
PeID
Microsoft Visual C++ 6.0 DLL (Debug)Microsoft Visual C++ 7.0 - 8.0Microsoft Visual C++ 8Microsoft Visual C++ 8Microsoft Visual C++ v6.0 DLLSafeguard 1.03 -> SimonzhUPolyX 0.3 -> delikonVC8 -> Microsoft Corporation
1 malicious · 2 files
EXEce223670524974b51445c29a61491712Lumma Stealer
Structure
BINOverlay_d12b6594.bin
| Name | Value |
|---|---|
| Info | Overlay extracted: Overlay_d12b6594.bin (1024 bytes) |
LummaEncrypted@00084794 [0123456789abcdef]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@00084D40 [0123456789]
UNKNWOWNmalicious
?huhuhuhu
LummaEncrypted@00088810 [3333333333333333]
UNKNWOWNmalicious
LummaEncrypted@00089A88 [00010203040506070809101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899]
UNKNWOWNmalicious
huhuhuhuhuhuhuhuhuhuhu
Full artefact values (URLs, paths, registry keys, scripts…) are available with Essential.
Unlock with Essential