winrar-x64-710[.]exe

Resubmissions

30/07/2026, 11:04

260730-m6dnsszvdx

30/07/2026, 11:03

260730-m5tcvswcrh6

Sharing

Copy URL Twitter E-mail

General

Target
winrar-x64-710.exe
Size 3.6MB
Sample260730-m6dnsszvdx
SHA256 d9fc9e75e174f309efbbb0a4fe13ea27e50c0d1eac65e0ddc858a80a3a4c49a7
MD5 32595caa2a6bbbf58e9cc3c145e2aafe
SHA1 a85f67867e000d7bb3a074bb2b84fa3a143d0663
SHA512 151748c2c0971d0c9cebc9e4cf3dc0f36e72d9a4f288fff1979729851e6e4ec1ba41e6c4e20f5e13448ac1b9e940a3aa2bc2b097800e9640759f442c95eb4017
SSDEEP 98304:QbqeBA6Jz0+9vMWyDYjQNiYQeJKSjZyfXnEDTDeTNYv:GqUJg+xMW6Yj0rJK0Zyvl+
TLSH
T19A062319E39809F4F477E638C9D24A07E6B17C554375D24F13A90AAA2F336E09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

winrar-x64-710.exe

.exe 3.6MB

winrar-x64-710.exe

IMPHASH ff7e069b78bf716250a0686cc64fce2e
SHA256 d9fc9e75e174f309efbbb0a4fe13ea27e50c0d1eac65e0ddc858a80a3a4c49a7
MD5 32595caa2a6bbbf58e9cc3c145e2aafe
SHA1 a85f67867e000d7bb3a074bb2b84fa3a143d0663
SHA512 151748c2c0971d0c9cebc9e4cf3dc0f36e72d9a4f288fff1979729851e6e4ec1ba41e6c4e20f5e13448ac1b9e940a3aa2bc2b097800e9640759f442c95eb4017
SSDEEP 98304:QbqeBA6Jz0+9vMWyDYjQNiYQeJKSjZyfXnEDTDeTNYv:GqUJg+xMW6Yj0rJK0Zyvl+
TLSH
T19A062319E39809F4F477E638C9D24A07E6B17C554375D24F13A90AAA2F336E09E3E721
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

f6:42:d3:5f:6b:82:1c:55:3b:63:da:fe:6d:d9:43:42:64:a4:2b:9a:10:37:5f:5b:a8:cd:17:f7:dc:68:8b:98

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=HRB 109885,CN=win.rar GmbH,O=win.rar GmbH,L=Berlin,ST=Berlin,C=DE,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#130e436861726c6f7474656e62757267,1.3.6.1.4.1.311.60.2.1.2=#13064265726c696e,1.3.6.1.4.1.311.60.2.1.3=#13024445

Chains

Feb 17, 2025

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:8b:08:39:9e:c7:03:62:3c:72:cd:20:77:ad:65:d9

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Aug 8, 2023 - Aug 7, 2026

Subject

CN=DigiCert Timestamp 2024,O=DigiCert,C=US

Serial Number

0b:ae:66:bc:5a:ba:7f:95:87:c6:f9:e9:04:e3:33:04

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 26, 2024 - Nov 25, 2035

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

149568

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\Projects\WinRAR\SFX\setup\build\sfxrar64\Release\sfxrar.pdb

kernel32

GetLastError FormatMessageW LocalFree SetLastError CreateHardLinkW SetFileTime CreateFileW CloseHandle DeviceIoControl RemoveDirectoryW DeleteFileW GetLongPathNameW GetShortPathNameW MoveFileW GetStdHandle WriteFile ReadFile SetFilePointer SetEndOfFile FlushFileBuffers GetFileType CreateDirectoryW GetFileAttributesW SetFileAttributesW GetCurrentProcessId FindClose FindFirstFileW FindNextFileW GetVersionExW GetFullPathNameW FoldStringW GetModuleFileNameW SetCurrentDirectoryW GetCurrentDirectoryW GetModuleHandleW FindResourceW FreeLibrary GetProcAddress ExpandEnvironmentStringsW SetThreadExecutionState GetCurrentProcess CompareStringW AllocConsole AttachConsole WriteConsoleW Sleep FreeConsole ExitProcess GetSystemDirectoryW LoadLibraryW InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection CreateThread WaitForSingleObject GetProcessAffinityMask CreateSemaphoreW CreateEventW ReleaseSemaphore SetThreadPriority SetEvent ResetEvent FileTimeToSystemTime SystemTimeToTzSpecificLocalTime SystemTimeToFileTime GetSystemTime WideCharToMultiByte MultiByteToWideChar GetCPInfo IsDBCSLeadByte GlobalAlloc SizeofResource LoadResource LockResource GlobalLock GlobalUnlock GlobalFree GetDateFormatW GetTimeFormatW GlobalMemoryStatusEx GetLocaleInfoW GetNumberFormatW GetCommandLineW SetEnvironmentVariableW GetLocalTime GetTickCount MoveFileExW GetTempPathW GetExitCodeProcess GetConsoleMode GetConsoleOutputCP HeapSize SetFilePointerEx GetStringTypeW SetStdHandle GetProcessHeap LCMapStringW FlsFree FlsSetValue RaiseException GetSystemInfo VirtualProtect VirtualQuery LoadLibraryExA RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader EncodePointer InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW QueryPerformanceFrequency GetModuleHandleExW HeapFree HeapAlloc HeapReAlloc FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue

oleaut32

SysAllocString SysFreeString VariantClear

gdiplus

GdipFree GdipAlloc GdipCloneImage GdipDisposeImage GdipCreateHBITMAPFromBitmap GdiplusStartup GdiplusShutdown GdipCreateBitmapFromStream

Name

.text

Size

243KB

Virtual Size

243KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

70KB

Virtual Size

70KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

44KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

15KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.didat

Size

1024B

Virtual Size

824B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

134KB

Virtual Size

133KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

winrar-x64-710.exe

kernel32

oleaut32

gdiplus

generic