Lofy Cloner & Casa Cloner (1).rar
- SHA256 7fd1cbb0ec656ed8cc87e6e66826bbbc4d571e449955533e70c5ec6bbd3abd93
Password
lofyshop2023
Resubmissions
28/08/2026, 15:32
260828-syk1ssztd1828/08/2026, 15:30
260828-sxyv9szdmb728/08/2026, 15:06
260828-sgtxdabl2x728/08/2026, 15:05
260828-sf8ddazckd828/08/2026, 15:04
260828-sfvsaayzds328/08/2026, 15:03
260828-sfefasyzcv720/02/2026, 19:45
260220-ygds2sa14h720/02/2026, 19:41
260220-yegrxsaz6h729/12/2025, 17:40
251229-v848jaznfn30/07/2025, 14:18
250730-rl9mysak4vGeneral
- Target Lofy Cloner & Casa Cloner (1).rar
- Size 8.1MB
- Sample250730-rl9mysak4v
- SHA256 7fd1cbb0ec656ed8cc87e6e66826bbbc4d571e449955533e70c5ec6bbd3abd93
- MD5 d0e8e147bb28b0038df18d061449bf5c
- SHA1 e72fb97aeed1b8d20a4c50e79a28bba3a65cc186
- SHA512 7f37bc9876510915fd46c1b7f2e6e9d1a2032f75864c623942558bb2d2ba9ab22eabca0fa272926424a2506f1df352c21687d04316535bef2f9f06481e869016
- SSDEEP 196608://p1bB1CfrKsYTs9tMVFXyYqmFbeZAmeb2B6pCmwA8://+epTs9tMSYqCbeZA3yBswj
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Detects Pyinstaller 1 IoCs
resource yara_rule static1/unpack001/Lofy Cloner & Casa Cloner.exe pyinstaller - Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Lofy Cloner & Casa Cloner.exe
File Explorer
-
Lofy Cloner & Casa Cloner (1).rar.rar 8.1MB
-
Lofy Cloner & Casa Cloner.exe.exe 8.3MB
-
main.pyc4KB
Lofy Cloner & Casa Cloner.exe
- IMPHASH d170e2e5adcfc4c271f2eb78a565305e
- SHA256 bded5cf8faf4c7ff8a7582538cd325da029adcae50b14f38ed4dc6adabc5673b
- MD5 66e6140ba9e19c29529dceb265b17b41
- SHA1 fefdb348596c3160bac45888d56e6e940a452907
- SHA512 b0a26c3d34e1f1043e06ca759d645d10c7b1ab6f05a1d5e1788714b0d568c27f2763450f2af608cf01c7947dc7f55cc403dfa3355d51c45227f2951e4d5a6944
- SSDEEP 196608:GJi56vBAoiL2Vmd6+DNnNgwQ+dtLZ7k30szjad0tNNlezM:GIL2Vmd6mZNjd7NszjJle
- MD5 SHA1 SHA512 SSDEEP
-
Detects Pyinstaller
-
Unsigned PE
Checks for missing Authenticode signature.
Password
lofyshop2023
Minor OS version
2
Major OS version
5
Entry point
40240
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
GetCommandLineW
GetEnvironmentVariableW
SetEnvironmentVariableW
ExpandEnvironmentStringsW
CreateDirectoryW
GetTempPathW
WaitForSingleObject
Sleep
GetExitCodeProcess
GetStartupInfoW
FreeLibrary
LoadLibraryExW
CloseHandle
GetCurrentProcess
LocalFree
FormatMessageW
MultiByteToWideChar
WideCharToMultiByte
SetEndOfFile
GetProcAddress
GetModuleFileNameW
SetDllDirectoryW
CreateProcessW
GetLastError
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetModuleHandleW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
RaiseException
GetCommandLineA
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
GetFullPathNameW
RemoveDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
SetStdHandle
SetConsoleCtrlHandler
DeleteFileW
ReadFile
GetStdHandle
WriteFile
ExitProcess
GetModuleHandleExW
HeapFree
GetConsoleMode
ReadConsoleW
SetFilePointerEx
GetConsoleOutputCP
GetFileSizeEx
HeapAlloc
CompareStringW
LCMapStringW
GetCurrentDirectoryW
FlushFileBuffers
GetFileAttributesExW
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetTimeZoneInformation
HeapSize
HeapReAlloc
WriteConsoleW
advapi32
ConvertSidToStringSidW
GetTokenInformation
OpenProcessToken
ConvertStringSecurityDescriptorToSecurityDescriptorW
Name
.text
Size
141KB
Virtual Size
141KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
69KB
Virtual Size
69KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
64KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
8KB
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
512B
Virtual Size
244B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
246KB
Virtual Size
246KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=11, id=260, version=27412,
count=7, id=259, version=27412,
count=186, id=261, version=27412,
count=3, id=253, version=28518,
count=38, id=261, version=30034,
count=17, id=260, version=30034,
count=9, id=259, version=30034,
count=5, id=257, version=27412,
count=113, id=1, productName=Unmarked objects,
count=19, id=260, productName=VS2019 v16.11.8 build 30138, version=30138,
count=1, id=258, productName=VS2019 v16.11.8 build 30138, version=30138,
main.pyc
- SHA256 71504675c785aed3d14ceb0ec19ac736e1d663a60a2be3a10fb7e3a483884acc
- MD5 b248370c84e395334b5db2c23a31a406
- SHA1 d724fd76f738e45295dd0ec67dd494364c6560fc
- SHA512 03b4ca392cb07a7f615eed7a322ee913a1d74e4be33525d8158bd6a615019569fa48f40b6140f4990ec2bb385c90ceb5bc88dff9fd8bd53df9685eb82fb576fd
- SSDEEP 96:zRAapvy2IqrvrtUHnPCf0KiqnPb4Rv6qvPrQZMWTwfLRPoOYua:N7HvrtU2Z6vxv8Zp0fVPozua
- MD5 SHA1 SHA512 SSDEEP