Static task
static1
General
-
Target
DeltaLauncher.exe
-
Size
14.1MB
-
MD5
eaca79b12b84340d4f7a11a2875ce04c
-
SHA1
2ea673425624d9e5ebfd8243999e94d321644692
-
SHA256
71512bdd8d66c4e6dea1a114effaaf7eb4ac9ec09a696bf4ff31ffa13392d8c3
-
SHA512
d0c51263320eacce2221b1a13b4093a2b3243a6190e9ad97efb54fcac640706ff709be917648702f470446452b42f5921b84fc1bbc24c4abff88d80a52f8233b
-
SSDEEP
196608:02WxT5OOJ4x+oukB2zb4zZVeqx2s+kSDp9rN+ttAn8KySjc8ymNxlaCVco9:PosOJ4X3Qb4lVeK2sSDp9S+neeczqO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DeltaLauncher.exe
Files
-
DeltaLauncher.exe.exe windows:6 windows x64 arch:x64
c96315d02ce9cac563e48f50731b413e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
d3d9
Direct3DCreate9
kernel32
GlobalLock
GetVersion
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
EnumWindows
CharUpperBuffW
gdi32
GetDeviceCaps
advapi32
RegOpenKeyExA
shell32
ShellExecuteA
oleaut32
VariantClear
imm32
ImmGetContext
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 159KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 773KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.-PU Size: - Virtual size: 13.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.G!M Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.]s( Size: 14.1MB - Virtual size: 14.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ