Summary | ZeroBOX

lummac2.exe

PE32 PE File
Category Machine Started Completed
FILE s1_win7_x6403_us June 14, 2024, 7:34 a.m. June 14, 2024, 7:51 a.m.
Size 310.5KB
Type PE32 executable (GUI) Intel 80386, for MS Windows
MD5 6e3d83935c7a0810f75dfa9badc3f199
SHA256 dc4f0a8e3d12c98eac09a42bd976579ccc1851056d9de447495e8be7519760ed
CRC32 320DD32C
ssdeep 6144:3lGhYe2gss2fHZq4uCDrgcKJCMBus902mdK/WI5O7KKKDi4G:3lGhYHh0CnYZSLP7KKKD1G
Yara
  • IsPE32 - (no description)
  • PE_Header_Zero - PE File Signature

Name Response Post-Analysis Lookup
No hosts contacted.
IP Address Status Action
164.124.101.2 Active Moloch

Suricata Alerts

No Suricata Alerts

Suricata TLS

No Suricata TLS

section {u'size_of_data': u'0x00009800', u'virtual_address': u'0x00040000', u'entropy': 7.014920556264192, u'name': u'.data', u'virtual_size': u'0x00012b84'} entropy 7.01492055626 description A section with a high entropy has been found