rh_0[.]4[.]9[.]exe

Resubmissions

27/11/2024, 10:03

241127-l3hmxaypaw10

01/08/2024, 15:54

240801-tcb2fasenh10

05/04/2024, 12:07

240405-pakhksca79

18/07/2023, 20:01

230718-yrm5gaec6v10

Sharing

Copy URL Twitter E-mail

General

Target
rh_0.4.9.exe
Size 456KB
Sample240405-pakhksca79
SHA256 f0f70c6ba7dcb338794ee0034250f5f98fc6bddea0922495af863421baf4735f
MD5 cf4914d021c5a5378428d6f5d3b1c57b
SHA1 2dc95dc667cf4c49f78b4b8033cec85d889fd069
SHA512 c07408df7b0bb3f5f57482d9d93b79654e1eb1cb5e938c1e814b25ca6bdf5729c5de85c85b4e91116c38ba875b4611372f6452d1d2ad1e3f2be59b62009fae43
SSDEEP 6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+n:2uWP/BZUyoLu8Agsmxwrvejkd2
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
rh_0.4.9.exe

File Explorer

rh_0.4.9.exe

.exe 456KB

rh_0.4.9.exe

IMPHASH eca0c30b65294d02a6c6180a6b323b58
SHA256 f0f70c6ba7dcb338794ee0034250f5f98fc6bddea0922495af863421baf4735f
MD5 cf4914d021c5a5378428d6f5d3b1c57b
SHA1 2dc95dc667cf4c49f78b4b8033cec85d889fd069
SHA512 c07408df7b0bb3f5f57482d9d93b79654e1eb1cb5e938c1e814b25ca6bdf5729c5de85c85b4e91116c38ba875b4611372f6452d1d2ad1e3f2be59b62009fae43
SSDEEP 6144:2uWP/BtSnurUylcrGYlnIttxv8HbcLgsd1Gus5psdrvV44dixP+MHDkBYdxtG9+n:2uWP/BZUyoLu8Agsmxwrvejkd2
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

103583

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualProtect HeapSize GetStringTypeW GetStringTypeA GetLocaleInfoA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter LCMapStringW LCMapStringA InterlockedExchange RtlUnwind HeapReAlloc VirtualAlloc InitializeCriticalSection LoadLibraryA GetCPInfo GetSystemInfo GetACP EnterCriticalSection LeaveCriticalSection VirtualFree DeleteCriticalSection GetFileType SetHandleCount GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA UnhandledExceptionFilter GetModuleFileNameA GetStdHandle WriteFile TerminateProcess TlsGetValue TlsSetValue TlsFree GetLastError GetCurrentThreadId SetLastError TlsAlloc GetProcAddress HeapCreate VirtualQuery WaitForSingleObject HeapDestroy CreateEventW ExitProcess WideCharToMultiByte OutputDebugStringW CreateFileW ReadFile CloseHandle GetCurrentProcess MultiByteToWideChar GetModuleHandleW InterlockedIncrement GetModuleFileNameW lstrlenW HeapFree OutputDebugStringA MulDiv GetProcessHeap HeapAlloc GetOEMCP GetVersionExA GetCommandLineA GetStartupInfoA GetModuleHandleA

user32

GetClassInfoW FrameRect CharUpperBuffW IsIconic EnableWindow DrawIcon DeleteMenu SetTimer CreateAcceleratorTableW GetSystemMenu DrawMenuBar SetMenuItemInfoW GetWindowTextW GetDCEx RegisterClassW GetMenuItemInfoW SetScrollPos FillRect GetSystemMetrics GetDC MsgWaitForMultipleObjectsEx EndMenu DestroyCursor IsZoomed GetCursor GetScrollPos DispatchMessageW DefFrameProcW DestroyMenu ReleaseDC IsDialogMessageW GetScrollRange DefMDIChildProcW GetMenuStringW PeekMessageW CopyImage ShowCaret LoadIconW DrawFocusRect LoadBitmapW GetDlgCtrlID LoadStringW GetClassInfoExW DestroyIcon ShowWindow EndPaint PostMessageW CreateWindowExW BeginPaint LoadCursorW GetClientRect InsertMenuW CreateIcon DestroyWindow KillTimer GetScrollInfo CreateMenu

advapi32

RegCloseKey RegOpenKeyExW RegQueryValueExW

gdi32

Pie AngleArc Polygon CreateSolidBrush RectVisible CreateICW CreatePalette PolyBezierTo RoundRect RestoreDC GetWindowOrgEx CreateCompatibleBitmap MoveToEx GetTextMetricsW GetStockObject SetTextColor SetAbortProc SetBkMode StretchBlt CreateDCW GetDeviceCaps SetRectRgn GetEnhMetaFileHeader

ole32

OleInitialize CoUninitialize OleUninitialize CoTaskMemFree CoTaskMemAlloc IsEqualGUID CoInitialize CoCreateInstance

oleaut32

VariantChangeType SafeArrayPutElement VariantCopy VariantClear SafeArrayGetElement SafeArrayGetUBound SysFreeString GetErrorInfo VariantInit SafeArrayPtrOfIndex SysAllocStringLen SafeArrayGetLBound SafeArrayAccessData VariantCopyInd SysReAllocStringLen SafeArrayCreate SafeArrayUnaccessData

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

winspool.drv

EnumPrintersW ord203 OpenPrinterW ClosePrinter DocumentPropertiesW