www.rywh1405.com_sample.bin
- SHA256 f8ad6c2fe32d647fe8279f803eb25a6a4b6c39c467186bb9198002cc07f7b3d3
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
app_softwae86352011.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
app_softwae86352011.exe
Resource
win11-20260513-en
windows11-21h2-x64
17 signatures
150 seconds
General
- Target www.rywh1405.com_sample.bin
- Size 8.1MB
- Sample260608-vdflpads2n
- SHA256 f8ad6c2fe32d647fe8279f803eb25a6a4b6c39c467186bb9198002cc07f7b3d3
- MD5 c9ba919ced4295d3af81507bd4232d38
- SHA1 347ad0b3510cb387870dfdddffdd972dbce8431c
- SHA512 edbdd53cf7643defc702639364376c8f4535eee4681fcc6e74a92fe56d7c8c627ec432feafdf3c2901284c8ab428a1695e2f34692fbeeef016e3c88e390ed654
- SSDEEP 196608:p2JZMKvPXkbcDNqQjen+OgOTzATockCgfYjQX8rvagCaM:p2XMKUQLqNsTocggi8ugXM
- TLSH T1448633E941B2472CEA7A873BCD947822F1F541FE88539F1ADC78D641DAE3E4C999010E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/app_softwae86352011.exe
File Explorer
-
www.rywh1405.com_sample.bin.zip 8.1MB
-
app_softwae86352011.exe.exe 77.0MB
app_softwae86352011.exe
- IMPHASH e611cb40dae30a74fa3f15a0e816a66a
- SHA256 c9f04895732aa47a8ae625dbee7c525c82bfb046a17f36298fec13a4d2501912
- MD5 8d9c096525a9c6af25251bef1ab1f528
- SHA1 16f9e300fd4a621f98e6110f449211a48a508dd2
- SHA512 e17e971303a261ab82fb842b03126ea09792c9e054d4b9ca122ced040bda04278bcc7ca062338b48a3518f9a64bb5360001a517ac7b6e552907898736494d11a
- SSDEEP 196608:b5Vdl7+9QvRojqegVjqe9qGttZnCN5fMJPhAf1QxZ6Y:b5V6KvSSF4z1Qx4Y
- TLSH T148083C9BFA418DE3F40AD234849B8BA02372ECB546A183073259B7657FFF3484ED6195
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
91816
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
gdiplus
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
winmm
PlaySoundW
imm32
ImmGetDefaultIMEWnd
kernel32
LoadLibraryA
GetProcAddress
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
SetCurrentDirectoryW
GetSystemDirectoryW
DeleteFileW
lstrcpynW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
GetStringTypeW
SetFilePointer
WriteConsoleW
ReadFile
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlsAlloc
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
FlsGetValue
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetVersion
HeapSetInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
ExitProcess
HeapSize
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
FindResourceW
CloseHandle
lstrcpyW
GetLastError
CreateMutexW
lstrcmpiW
GetSystemDefaultLangID
GetEnvironmentVariableW
lstrlenW
GetModuleFileNameW
GetLocalTime
ExpandEnvironmentStringsA
EncodePointer
DecodePointer
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
RaiseException
GetFileType
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
GetStartupInfoW
GetCommandLineW
FindFirstFileW
WideCharToMultiByte
GetACP
SetErrorMode
FindClose
GetCurrentProcess
FreeLibrary
SetCurrentDirectoryA
MultiByteToWideChar
lstrcatW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetTempPathW
CreateFileW
GetVersionExA
GetModuleHandleA
LoadLibraryW
GetSystemDirectoryA
GetModuleHandleW
GetVersionExW
GetLocaleInfoW
VirtualAlloc
HeapFree
user32
SetWindowTextW
TrackPopupMenuEx
EnableMenuItem
CreateIconIndirect
GetIconInfo
GetRawInputDeviceInfoW
GetRawInputDeviceList
LoadIconW
SetFocus
EndDialog
GetDlgItemInt
IsWindowEnabled
SetDlgItemInt
SystemParametersInfoW
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
PostQuitMessage
DestroyMenu
EndPaint
BeginPaint
ReleaseDC
GetDC
SetWindowPos
GetSystemMetrics
GetClassNameW
GetWindowTextW
KillTimer
PostMessageW
TrackPopupMenu
CheckMenuItem
ModifyMenuW
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
GetForegroundWindow
DestroyWindow
CreateDialogParamW
GetSubMenu
LoadMenuW
RegisterWindowMessageW
RegisterHotKey
UnregisterHotKey
UpdateWindow
GetWindowTextLengthW
SetLayeredWindowAttributes
CreateWindowExW
RegisterClassExW
LoadCursorW
DispatchMessageW
IsWindow
SendMessageA
EnumChildWindows
GetWindowLongA
CallWindowProcW
GetMonitorInfoW
EnumDisplayMonitors
GetWindowLongPtrW
SetWindowLongPtrW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DialogBoxIndirectParamW
GetParent
ScreenToClient
MonitorFromPoint
GetMonitorInfoA
GetClientRect
TranslateMessage
GetMessageW
DestroyIcon
CopyIcon
DialogBoxParamW
MessageBoxW
LoadImageW
SetTimer
MessageBeep
keybd_event
SendMessageW
GetKeyState
FindWindowW
GetDlgItemTextW
SetDlgItemTextW
wsprintfW
SendDlgItemMessageW
ShowWindow
gdi32
DeleteDC
CreateCompatibleDC
GetStockObject
GetObjectA
CreateFontIndirectA
GetDIBColorTable
DeleteObject
SetDIBits
SelectObject
SetBkColor
TextOutW
SetTextColor
GetDeviceCaps
GetDIBits
GetObjectW
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
shell32
Shell_NotifyIconW
DragFinish
DragQueryFileW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
shlwapi
StrCmpNIW
Name
.text
Size
170KB
Virtual Size
169KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
76.7MB
Virtual Size
76.7MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=144, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=10, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=57, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=1, id=136, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=344, id=1, productName=Unmarked objects,
count=15, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,