laplas | 4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed

General

Target
4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed
Size 4.6MB
Sample221127-t64zbacc52
SHA256 4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed
MD5 10c4eb50adca0b5e5c38ae0fdfa422fc
SHA1 204fa092bd55f6c999733807115dbc5817fd2fa8
SHA512 552fd54a83ba2bb2b64d25890aa1336ca397669fd3dbdf8bc64a3edc2bb4e71aa4207b54b09e3ca050acaf2d4cb4b56740b22152abd047e1627874a8ec968636
SSDEEP 49152:a/7FssC0KqUwzp+Z9vAaE5FKY/t764UzLUA/AOiyjrbsnnzvSn9rsPN/+9rjNvnT:K5sr4V+Zp4UzJ/TknzZ69XOY
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

laplas

Malware Config

Extracted

Family

laplas

C2

clipper.guru

Attributes

api_key
b208717c54146010ab89e628591e2a7b11493ef1c593e7b3f15b1c06b1778d59

Signatures

Laplas family
laplas

File Explorer

4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed

.exe 4.6MB

4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed

IMPHASH 9cbefe68f395e67356e2a5d8d1b285c0
SHA256 4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed
MD5 10c4eb50adca0b5e5c38ae0fdfa422fc
SHA1 204fa092bd55f6c999733807115dbc5817fd2fa8
SHA512 552fd54a83ba2bb2b64d25890aa1336ca397669fd3dbdf8bc64a3edc2bb4e71aa4207b54b09e3ca050acaf2d4cb4b56740b22152abd047e1627874a8ec968636
SSDEEP 49152:a/7FssC0KqUwzp+Z9vAaE5FKY/t764UzLUA/AOiyjrbsnnzvSn9rsPN/+9rjNvnT:K5sr4V+Zp4UzJ/TknzZ69XOY
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

407984

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

Name

.text

Size

2.3MB

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

2.0MB

Virtual Size

2.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

211KB

Virtual Size

401KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

1024B

Virtual Size

988B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

93KB

Virtual Size

93KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.symtab

Size

512B

Virtual Size

4B

Characteristics

IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Extracted

Signatures

File Explorer

4fb85146079a6ad27e94e913e2302d6a47f8f5409f55f174aecdd8c99ab372ed

kernel32