v3.24.544.zip
- SHA256 044407df585eba82f88beda8f822c2c7a7ac36862301906ea111f6a8567a8e05
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RealUI_v3.24.544.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
2 signatures
900 seconds
Behavioral task
behavioral2
Sample
RealUI_v3.24.544.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
2 signatures
900 seconds
General
- Target v3.24.544.zip
- Size 82.3MB
- Sample260820-t6321sfm7x
- SHA256 044407df585eba82f88beda8f822c2c7a7ac36862301906ea111f6a8567a8e05
- MD5 ebbd2ccc123ccca9244c13bb141338c1
- SHA1 2b778b9032d985d2ccb8e9b34d33645d98cd8ec6
- SHA512 e6a47e332aecca27f64477fda0a942b244509f5fc5a60a69c7674b624c2971d368e47bb360e697e0ca123ade1730d4d68408ad2ac6f550efd869f3f85ad09dfd
- SSDEEP 1572864:WUjCwU5FSU50cw+LOWHmcvD4UeKP7d6x2pzs9mYFwx/ck9fD51z8a:WUebFV50cFLOWHmilP5cmik9rHga
- TLSH T1EF1833E8ACE6FF6DCFC583A2481C8904762173780C89CB5AE09E5175C9F1A60AF3567D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10
Malware Config
Signatures
- Codesign digest Mismatch 1 IoCs
File was altered after it was signed.
resource unpack002/RealUI_v3.24.544.exe
File Explorer
-
v3.24.544.zip.zip 82.3MB
-
v3.24.544.zip.zip 82.3MB
-
RealUI_v3.24.544.exe.exe 86.0MB
v3.24.544.zip
- SHA256 939a02a863dd9f8e7229280d664eb9068702da723ce1aa497fbe0dbcfa06dfde
- MD5 e169e6c1591e8b34443eb15fad13ed1e
- SHA1 b4d3545f0f1e57dcd3acc8ec19149bce89aee3bb
- SHA512 486a1ee0d011fc889b0c128769ac48113e5264708ddf8a4aba51a152c0997799a7d88a649f59e56b4e0f4f1d7892e2b515a2dbf40a14a9c7c2399af54d8444d1
- SSDEEP 1572864:PWr8QqBd0CPqO2q1O+JCA/rmCQKlRzjcbpoLsahCTlAMBlZ1FHMP:PWQtd/PqOZ1O+JCgfdImsSMBzjsP
- TLSH T1161833E4ECE6FF6ECFD683A2480D8D04662177BC0CC9CB59909E5165C8F1A60AF3166D
- MD5 SHA1 SHA512 SSDEEP TLSH
RealUI_v3.24.544.exe
- IMPHASH 4f2f006e2ecf7172ad368f8289dc96c1
- SHA256 dbb316309bc174668c61cf63380372ec31109c9c2cb111e16e357dc9a625802c
- MD5 34eeacb820589f40eb8e8ddef1c980b7
- SHA1 1ae59144017bc22c062d639fc2cdf97721157d76
- SHA512 eae17dcb8853c07c4e1246644ec72cc4968f5d6617042e9723ce226418b21512991127404bdae6a8ba0fe8f1f30b3c237b9c4fd6c9fe166bdc7d7988ff4a27a0
- SSDEEP 1572864:6DSq+q1FWsBmiss9Kqhw8XdkAmELftUX5a1moT6N9kAP/NLjti9:+FrFNBmiD9Kqhwml/OmmCAP13U9
- TLSH T1FE183303BCA545A9C49B9734C9A79602BB32BC98873133DB2E54B6383F76BC05E79714
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Codesign digest Mismatch
File was altered after it was signed.
PE Signature issue
Digest
60:a7:18:0b:93:d1:8d:e2:21:6c:de:15:0d:d9:c9:5d:57:3d:5d:2f:8f:f2:6e:b0:50:a2:32:03:55:77:13:09
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Not trusted
Signing Certificate
CN=Trhrow,O=Trhrow,C=US
Chains
Aug 20, 2026
CN=Trhrow,O=Trhrow,C=US
Subject
CN=Trhrow,O=Trhrow,C=US
Serial Number
d0:fe:30:86:b1:07:c8:38:f3:22:3d:56:56:37:61:48
Issuer
CN=Trhrow,O=Trhrow,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Timespan
Aug 13, 2026 - Aug 20, 2027
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Minor OS version
1
Major OS version
6
Entry point
416576
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetUnhandledExceptionFilter
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.8MB
Virtual Size
3.8MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
73KB
Virtual Size
422KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
33KB
Virtual Size
32KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
156B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
20KB
Virtual Size
20KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
188KB
Virtual Size
188KB
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ