lostdeltarune[.]exe

Resubmissions

09/08/2026, 14:52

260809-r866cazfle

09/08/2026, 14:52

260809-r8wdvazfkc3

Sharing

Copy URL Twitter E-mail

General

Target
lostdeltarune.exe
Size 7.5MB
Sample260809-r866cazfle
SHA256 778ce0a5c5aec33b140eea38b08ebdc2924346cc08092e047600cea0942a8960
MD5 80880d849d3b4df75c6092bf0a9981b6
SHA1 59ab8bb53afb2e2b07e59b049b94f12a275e93d6
SHA512 9d4f6ebba5acbcca609df407f9f07a67aa00d25d73493e4b4905557d795f5e50598ed75529bddf61eed2d4d6cce89be3d0676561de7d2909d732f36f8ce56d1f
SSDEEP 98304:3GpUtLK6gPtMUT+F08nAmSsVZC/ggMdq2L2:3G6hK6+jEvnAmSsVZUggne2
TLSH
T194866B4672A0C1DDD0678039C19666F7E6723C44DF9087DB6AA07F2C3F73AD449BAA12
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
lostdeltarune.exe

File Explorer

lostdeltarune.exe

.exe 7.5MB

lostdeltarune.exe

IMPHASH 7b1d2530aa74004fe687cfeabd9a6631
SHA256 778ce0a5c5aec33b140eea38b08ebdc2924346cc08092e047600cea0942a8960
MD5 80880d849d3b4df75c6092bf0a9981b6
SHA1 59ab8bb53afb2e2b07e59b049b94f12a275e93d6
SHA512 9d4f6ebba5acbcca609df407f9f07a67aa00d25d73493e4b4905557d795f5e50598ed75529bddf61eed2d4d6cce89be3d0676561de7d2909d732f36f8ce56d1f
SSDEEP 98304:3GpUtLK6gPtMUT+F08nAmSsVZC/ggMdq2L2:3G6hK6+jEvnAmSsVZUggne2
TLSH
T194866B4672A0C1DDD0678039C19666F7E6723C44DF9087DB6AA07F2C3F73AD449BAA12
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4906752

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\a\GameMaker\GameMaker\GameMaker\Runner\GMS2-Runner-Main\VC_Runner\x64\Release-Zeus\Runner.pdb

rpcrt4

UuidCreate UuidToStringW

wininet

InternetCrackUrlA InternetSetOptionA InternetCloseHandle HttpSendRequestA InternetConnectA InternetReadFile InternetCanonicalizeUrlA HttpOpenRequestA HttpQueryInfoA InternetOpenA InternetGetConnectedState

d3d11

D3D11CreateDevice

dbghelp

MiniDumpWriteDump

winmm

joyGetPosEx joyGetPos timeGetTime timeGetDevCaps timeEndPeriod timeBeginPeriod

ws2_32

listen bind getaddrinfo WSAStartup WSAAddressToStringA send socket ntohs connect recvfrom recv getsockopt freeaddrinfo sendto ioctlsocket setsockopt WSAGetLastError __WSAFDIsSet select getpeername inet_ntop getnameinfo htons closesocket accept inet_pton

gdiplus

GdiplusShutdown GdiplusStartup

comctl32

InitCommonControlsEx

version

VerQueryValueW GetFileVersionInfoW GetFileVersionInfoSizeW

avrt

AvSetMmThreadCharacteristicsA

propsys

PropVariantToUInt32 PropVariantToInt64

iphlpapi

GetAdaptersAddresses NotifyIpInterfaceChange

api-ms-win-core-path-l1-1-0

PathCchCombine

kernel32

WriteFile GetStdHandle FreeLibraryAndExitThread ExitThread PeekNamedPipe GetFileType GetFileInformationByHandle GetDriveTypeW FileTimeToSystemTime SystemTimeToTzSpecificLocalTime FindFirstFileExW MoveFileExW SetFileAttributesW GetFileAttributesExW GetModuleHandleExW HeapWalk HeapValidate TlsFree TlsSetValue TlsAlloc RtlUnwind RtlPcToFileHeader RtlUnwindEx GetProcessHeap HeapFree HeapAlloc TerminateProcess SetFilePointerEx GetConsoleMode InitializeSListHead IsProcessorFeaturePresent GetStartupInfoW UnhandledExceptionFilter ReadConsoleW FlushFileBuffers GetConsoleOutputCP GetFileSizeEx SetStdHandle GetDateFormatW TlsGetValue IsDebuggerPresent RtlVirtualUnwind FormatMessageW GetLastError LoadLibraryW GetProcAddress LocalFree MultiByteToWideChar FreeLibrary WideCharToMultiByte LoadLibraryA OutputDebugStringA SetWaitableTimer CreateWaitableTimerW CloseHandle GetConsoleWindow SetLastError GetFullPathNameW GetFileAttributesW GetExitCodeThread DeleteFileW CreateThread GetCurrentDirectoryW GetModuleHandleW ReadFile SetFilePointer CreateFileW GetFileSize FormatMessageA LoadLibraryExW CreateDirectoryW FindFirstFileW FindNextFileW RemoveDirectoryW GetModuleFileNameW FindClose ResumeThread GetTempPathA CreateProcessW GetTimeZoneInformation WaitForSingleObject GetTickCount64 QueryPerformanceFrequency QueryPerformanceCounter CompareStringW K32GetProcessMemoryInfo GetCurrentDirectoryA SetCurrentDirectoryA GlobalAlloc GlobalLock GlobalUnlock GetLocaleInfoW GetVersionExW GetSystemInfo Sleep VerSetConditionMask VerifyVersionInfoW GlobalFree GetCurrentProcessId DebugBreak GetEnvironmentVariableA ExitProcess lstrlenA GetVersion SetEnvironmentVariableA CreateFileMappingW MapViewOfFile MoveFileA GetCommandLineW SetProcessInformation ExpandEnvironmentStringsW GetFinalPathNameByHandleW SetErrorMode GetCurrentThreadId SetUnhandledExceptionFilter WaitForSingleObjectEx CreateEventExA HeapReAlloc RtlLookupFunctionEntry RtlCaptureContext CreateEventW ResetEvent SetEvent GetStringTypeW GetCPInfo LCMapStringEx DecodePointer EncodePointer GetSystemTimeAsFileTime FlsFree FlsSetValue FlsGetValue FlsAlloc GetNativeSystemInfo SleepConditionVariableSRW WakeAllConditionVariable TryEnterCriticalSection InitializeCriticalSectionEx InitializeConditionVariable InitializeCriticalSection SetThreadPriority WakeConditionVariable SleepConditionVariableCS DeleteCriticalSection AcquireSRWLockExclusive ReleaseSRWLockExclusive LeaveCriticalSection InitializeCriticalSectionAndSpinCount EnterCriticalSection InitializeSRWLock LoadLibraryExA VirtualQuery VirtualProtect RaiseException GetTimeFormatW LCMapStringW IsValidLocale GetUserDefaultLCID GetCurrentProcess EnumSystemLocalesW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW SetEndOfFile HeapSize CreateDirectoryA WriteConsoleW

user32

MsgWaitForMultipleObjectsEx EnumDisplaySettingsA TranslateMessage SetProcessDPIAware SetDlgItemTextA MessageBoxA OpenClipboard PeekMessageW EmptyClipboard GetForegroundWindow GetClipboardData SetClipboardData IsClipboardFormatAvailable keybd_event GetAsyncKeyState IsDialogMessageW DispatchMessageW CloseClipboard MonitorFromPoint GetCursorPos SetCursorPos IsIconic UpdateWindow EnumDisplaySettingsW EnumDisplayDevicesW IntersectRect GetMonitorInfoW ShowWindow IsWindowVisible GetWindowLongPtrW GetLayeredWindowAttributes GetWindowLongW GetWindowPlacement wsprintfW GetSystemMetrics SendMessageW GetActiveWindow ClientToScreen MapWindowPoints MoveWindow CreateDialogParamW GetDC EndDialog SetWindowTextW SetDlgItemTextW GetDlgItemTextW GetDlgItem DrawTextW ReleaseDC DefWindowProcW GetKeyState PostMessageW DestroyWindow CreateWindowExW ScreenToClient CallNextHookEx RegisterClassExW FindWindowExA SetWindowPlacement UnhookWindowsHookEx EnumWindows SetLayeredWindowAttributes SetFocus BringWindowToTop LoadCursorW SendMessageA SetParent SetCapture SetWindowsHookExW SetCursor GetClientRect FindWindowA ReleaseCapture SetForegroundWindow LoadImageW InvalidateRect MessageBoxW AdjustWindowRectEx DialogBoxParamW GetWindowRect SetWindowPos MonitorFromWindow SetWindowLongPtrW

gdi32

DeleteObject CombineRgn GetRgnBox GetDeviceCaps CreateRectRgnIndirect SelectObject GetStockObject

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegQueryValueExW CryptReleaseContext RegCloseKey RegOpenKeyExW CryptAcquireContextA CryptGenRandom

shell32

ShellExecuteW SHGetFolderPathW

ole32

CoInitialize CoTaskMemFree CoCreateFreeThreadedMarshaler PropVariantClear CoCreateInstance

dwmapi

DwmGetWindowAttribute DwmSetWindowAttribute DwmGetCompositionTimingInfo

imm32

ImmAssociateContext ImmSetCandidateWindow ImmReleaseContext ImmGetContext ImmSetCompositionWindow

Name

.text

Size

5.0MB

Virtual Size

5.0MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

1.7MB

Virtual Size

1.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

526KB

Virtual Size

3.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

234KB

Virtual Size

234KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

244B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

42KB

Virtual Size

42KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

lostdeltarune.exe

rpcrt4

wininet

d3d11

dbghelp

winmm

ws2_32

gdiplus

comctl32

version

avrt

propsys

iphlpapi

api-ms-win-core-path-l1-1-0

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

dwmapi

imm32

generic