WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64.zip
- SHA256 9a95eb294c5545b9f2850d63bda58d1d78b9449c7ac1982f9781220bac9b11df
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/webflow-runtime.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/webflow-runtime.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
General
- Target WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64.zip
- Size 3.7MB
- Sample261027-r66f2aex7m
- SHA256 9a95eb294c5545b9f2850d63bda58d1d78b9449c7ac1982f9781220bac9b11df
- MD5 d169e35b6d309ae59161b1441a84e381
- SHA1 7c88736b91da102e2565aa12f95391b1e240258b
- SHA512 a73931fa3beb5f1db5b86bd78118cbce5c206a5ba97a011b05639b2de5fcfbcd905cbe1de203c74c68c8180b1d1a4c62c63f46945aa3de4fd95c76d8a1340dc7
- SSDEEP 98304:Fo3xFJ3I78RRZNWRdKgcgopXrm54LEYxPJrCBypo:FAo7ozJbY4oYxxraypo
- TLSH T12506331627213E2EFC13E0D434FA398665E2684EF1679C97F799A36183474E30ED289D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/webflow-runtime.exe
File Explorer
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64.zip.zip 3.7MB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/default/app_icon.png.png 72KB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/default/webflow_runtime_icon.ico361KB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/default/webflow_runtime_icon.png.png 99KB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/LICENSE.txt232B
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/MaterialSymbolsRounded.ttf1.2MB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/Roboto-Bold.ttf121KB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/Roboto-Medium.ttf121KB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/Roboto-Regular.ttf120KB
-
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/webflow-runtime.exe.exe 5.9MB
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/default/app_icon.png
- SHA256 f2378d16d537ee29fa50efa46bd5244c2afe5a94e376cccbccae86d336a3d437
- MD5 bf7d2d44a4e845b1a29990346c66504c
- SHA1 9f400e958b3ba2bf7112713eca42fd579792213a
- SHA512 330b97e6bf88c86c07d2b769909b2c91f1c8765a18b773682a2333671335349ea16c6f93017fb7bfa50f77e27cff6f520e864861e252c61bf32cc32339cbe160
- SSDEEP 1536:2/I1umq8VK4GB39dFEQiuR9vJvctbsQJKw1LjV5pieI/jiFEX:6I1u2KdBNVBnvJ05sQJLXmeOOFEX
- TLSH T1737301C3C997D4A4CF0ED93D2F25C58670631ACFEAF6297597A6C82DE18E32516C290C
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/default/webflow_runtime_icon.ico
- SHA256 29907c399f58e821f4fd50b29369ee7937323dfea0ef23588d3ad636331df012
- MD5 324475411e48cdea89a479e8feb57833
- SHA1 42f2c464fcf99e33f22d78c23bfd8625539b75c7
- SHA512 2ee959b4e991c1fbe0742d3321a440ee6cdc5664148709af7491254595f2da326043b5f5ee81f679ca212fedd254f23e91e95d716f004a0c967dddcdd787c685
- SSDEEP 1536:x2ai6h2M9WIHoCqWf6IIE7Meq43efiMCNb8/1Itz6HDS:Pi6h33HoCzgItr
- TLSH T1897478663F4DBB31C38A64F4E1291655CCC7DE9001F2856BDAAE3C6AF235392D62E107
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/default/webflow_runtime_icon.png
- SHA256 c8cc661c7eb1fd8bf9ffcd397b179fe15aa2bcae85ac93c638bcc11d590a5bd8
- MD5 453367faaf8030a93b5b74d9f649cee6
- SHA1 5a838eaeeac0e6377dce28709f84f85e61137c84
- SHA512 674cecedd86c6a4eda98aa7d406efef1ab331b200258932038dac1f1b8c30560d006109c0cd335d3ff05660f9efec08f27c49d99af4a9b4ff6f2b91d27efb925
- SSDEEP 1536:226UW66O3w5REeSGSk/wVnuaHrp2ME1AugcyAJBVBFMuLNoGZH/8rJ1zT1Vx1:226U0qT7X2MEXgcyA//FMuLNZ81t1Vx1
- TLSH T19EA302A7C29E921EC512123206393CD772B2937F30946F3E2A59E1C874D35762722D1E
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/LICENSE.txt
- SHA256 b1a48e4d3eb29c6380d9602ed2ac938888f28574d2890f8c6cdaa51268d46f98
- MD5 02b93b355e6016a7dd96740584a21ed4
- SHA1 51f0377f9d415da56ddfacc12bc16d2766c18f37
- SHA512 a382153086f02450b41c597c0af4028377740644dee35745a752a468c145030c3c44c95cbfbfd30511e030d01c9123390301802f175b4383b01ec5863064fe05
- TLSH T1D5D0A7E39A26C5A7A7D1557FBC1F880ED95D610E4E8365A7700C4539416391510DC2A2
- MD5 SHA1 SHA512 TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/MaterialSymbolsRounded.ttf
- SHA256 80d75d66189161008fe4b7dafe81c12f1cbacfe14f4947e9094ac2afd06aad43
- MD5 e0c1dff0ef9956a8f09d5a3e54f1cefb
- SHA1 6710a7166815ad734d5097b3a5fe7bfdad8501ef
- SHA512 4559a2521b4d185373a085363bd190a2d8ac895d1ab3b43d9bef956e8a5a327f67de37696ccc64ac24e3341f863fb1df4ad6e3db2f8a01247bd81e2008ed85e2
- SSDEEP 24576:y0LR8TFkwsxLJCRVT9k7fkFHdjn3BE2cq/D0TZ7xLrnj:yBecdWZn
- TLSH T1BD455B22F19EE960DAAFD55E8E32BA218C5938E1EB3D03877705310BF11EE45ADD4907
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/Roboto-Bold.ttf
- SHA256 35757eaa996b3359022f47f164a67ee9eac04971af24c5b8fbd4b89e844ff190
- MD5 3338a205f8d26019661a2656308f8b8f
- SHA1 ca12fae807b1faa7c16919ff63879e187360dec2
- SHA512 a76206a6027b93142612a2bc52e26480bd12296795044b53acf290f82a4463923f8788664b5211e3c5d2620d6083084210695361321b96ac6ae5680dd8545730
- SSDEEP 3072:qpQY8R3+4I5UpwZ9OR276V7lIfVdWgYoADy:gm3+Z50wZAR274B6PYo0y
- TLSH T196C35A08F323AB9DDD2163BE8853E3956AAA7848E3D3831B247CF77558850D95CF12C9
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/Roboto-Medium.ttf
- SHA256 4d984240cefb093a74300bcae4b5dbd49f700e0af501eaaa079c56aa64142d2f
- MD5 987991d07a628705b3ec404c6641c992
- SHA1 3b8129505fb9b95c5ea6b39e7b27a5086224fad4
- SHA512 8ff99388a8263240e41a10f1fba081a8542d60d88a0f29b5fc1f4130beee92e6648046ba86f13c224adab4d50ee29d26eb26a3b7081427b69d55cc012a18536e
- SSDEEP 1536:35ef2qtcRjpnogYFVQvj+7oKy1feGGDlm5/YPjKLTZDbgEU1myZ4XoU0:5QcKGvj+77y121DQ5/YKXPXC
- TLSH T1FCC36D08E3536F88CD3167BEC853E3957AD97419E793830B206DB7B618860E9ACF55C8
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/materials/fonts/Roboto-Regular.ttf
- SHA256 dece7c71bbe61710787f0839c722c65e87355dd2eb4a823e6b5488121ff81e4b
- MD5 dd44e0fc642bcee526f88d872435dcbb
- SHA1 e8c3ed69f489ec5c2de017b1fcbb1990535fb8f8
- SHA512 f22335e6dc6130acf03634a563b387184af8c64fc4115f1d72d07ca40418a7d201d60ab101d46f616b8a6eff6c9c0b9bbc030351c533fa203a19ffd091669303
- SSDEEP 3072:opNiBBBYBBLBXAxkT5IvkbIE2qDe/7u27dZEzPczx:5BBBYBBLBwxkT5Icbv23/7z4z01
- TLSH T11AC36C18E313AB98D93063BDC853E3D16AEA7818E7C3831B246DB7B659860DD5DF41C8
- MD5 SHA1 SHA512 SSDEEP TLSH
WebFlow-Runtime-v0.2.1-dev-Portable-Windows-x86-64/webflow-runtime.exe
- IMPHASH 2c14a36650e793b194f201d50095a2c1
- SHA256 45b020a8a6e5c1aa2f1a086990ade08621b985c04059fd0d6a3a7593e59cc560
- MD5 943f3076af3081dcbdd77111de9d0b88
- SHA1 5f023bf74053b2ffa62620f0dfe70c1eba6ee306
- SHA512 369ed309edf11149add55fd355f53085778eaa806efd70faf8a3d689da285e8e15e4e4d8ad505bf338ef296712b3bc73ea1a0f53cf8fe5ac5cb0a7131c714a77
- SSDEEP 98304:GbliqHjlwtJb9jUOoBLYvx1WZxcwJU+EA+s:fjeBL0oZxcqU+EA
- TLSH T1DE565B13F756B1F8C15BC079C216A232AEE3BC89473566D737983A25FF35AC0DA28605
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
2850652
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
webflow_runtime.pdb
user32
AdjustWindowRectEx
AppendMenuW
ChangeDisplaySettingsExW
ChangeWindowMessageFilterEx
CheckMenuItem
ClientToScreen
ClipCursor
CloseTouchInputHandle
CreateAcceleratorTableW
CreateIcon
CreateMenu
CreatePopupMenu
CreateWindowExW
DefWindowProcW
DestroyAcceleratorTable
DestroyIcon
DestroyMenu
DestroyWindow
DispatchMessageA
DispatchMessageW
DrawIconEx
DrawMenuBar
DrawTextW
EnableMenuItem
EnumChildWindows
EnumDisplayMonitors
FillRect
GetActiveWindow
GetAsyncKeyState
GetClientRect
GetClipCursor
GetCursorPos
GetDC
GetForegroundWindow
GetKeyState
GetKeyboardLayout
GetKeyboardState
GetMenu
GetMenuBarInfo
GetMenuItemInfoW
GetMessageA
GetMessageW
GetMonitorInfoW
GetRawInputData
GetSystemMenu
GetSystemMetrics
GetTouchInputInfo
GetUpdateRect
GetWindow
GetWindowDC
GetWindowLongPtrW
GetWindowLongW
GetWindowPlacement
GetWindowRect
InvalidateRgn
IsIconic
IsProcessDPIAware
IsWindowVisible
KillTimer
LoadCursorW
MapVirtualKeyExW
MapVirtualKeyW
MapWindowPoints
MessageBoxW
MonitorFromPoint
MonitorFromRect
MonitorFromWindow
MsgWaitForMultipleObjectsEx
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
RedrawWindow
RegisterClassExW
RegisterClassW
RegisterRawInputDevices
RegisterTouchWindow
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
ScreenToClient
SendInput
SendMessageW
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenu
SetMenuItemInfoW
SetPropW
SetTimer
SetWindowDisplayAffinity
SetWindowLongPtrW
SetWindowLongW
SetWindowPlacement
SetWindowPos
ShowCursor
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
ToUnicodeEx
TrackMouseEvent
TrackPopupMenu
TranslateMessage
ValidateRect
VkKeyScanW
kernel32
AcquireSRWLockExclusive
AddVectoredExceptionHandler
AttachConsole
CancelIoEx
CloseHandle
CompareStringOrdinal
CopyFileExW
CreateDirectoryW
CreateFileW
CreateHardLinkW
CreateIoCompletionPort
CreateMutexA
CreateMutexW
CreateProcessW
CreateSymbolicLinkW
CreateThread
CreateWaitableTimerExW
DeleteFileW
DuplicateHandle
ExitProcess
FindClose
FindFirstFileExW
FindNextFileW
FlushFileBuffers
FormatMessageW
FreeEnvironmentStringsW
FreeLibrary
GetCommandLineW
GetConsoleMode
GetConsoleOutputCP
GetConsoleScreenBufferInfo
GetCurrentDirectoryW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetEnvironmentVariableW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFileType
GetFinalPathNameByHandleW
GetFullPathNameW
GetLastError
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOverlappedResult
GetProcAddress
GetProcessHeap
GetQueuedCompletionStatusEx
GetStdHandle
GetSystemDirectoryW
GetSystemTimeAsFileTime
GetSystemTimePreciseAsFileTime
GetUserDefaultUILanguage
GetWindowsDirectoryW
HeapAlloc
HeapFree
HeapReAlloc
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
LCIDToLocaleName
LoadLibraryA
LoadLibraryExA
LoadLibraryExW
LoadLibraryW
MoveFileExW
MultiByteToWideChar
OpenProcess
OutputDebugStringA
OutputDebugStringW
PostQueuedCompletionStatus
QueryPerformanceCounter
QueryPerformanceFrequency
ReadFile
ReadFileEx
ReleaseMutex
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetConsoleMode
SetConsoleTextAttribute
SetFileAttributesW
SetFileCompletionNotificationModes
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetHandleInformation
SetLastError
SetThreadStackGuarantee
SetUnhandledExceptionFilter
SetWaitableTimer
Sleep
SleepConditionVariableSRW
SleepEx
SwitchToThread
TerminateProcess
UnhandledExceptionFilter
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WideCharToMultiByte
WriteConsoleW
WriteFile
WriteFileEx
lstrlenW
gdi32
CreateCompatibleDC
CreateDIBSection
CreateRectRgn
CreateSolidBrush
DeleteDC
DeleteObject
GetDeviceCaps
SelectObject
SetBkMode
SetTextColor
comctl32
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
shell32
DragFinish
DragQueryFileW
SHAppBarMessage
Shell_NotifyIconGetRect
Shell_NotifyIconW
ntdll
NtCancelIoFileEx
NtCreateFile
NtCreateNamedPipeFile
NtDeviceIoControlFile
NtOpenFile
NtReadFile
NtWriteFile
RtlGetVersion
RtlNtStatusToDosError
advapi32
EventRegister
EventSetInformation
EventUnregister
EventWriteTransfer
RegCloseKey
RegCreateKeyExW
RegDeleteValueW
RegGetValueW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SystemFunction036
oleaut32
GetErrorInfo
SetErrorInfo
SysFreeString
SysStringLen
ws2_32
WSACleanup
WSAGetLastError
WSAIoctl
WSASend
WSASocketW
WSAStartup
accept
bind
closesocket
connect
freeaddrinfo
getaddrinfo
getpeername
getsockname
getsockopt
ioctlsocket
listen
recv
send
setsockopt
shutdown
api-ms-win-core-synch-l1-2-0
WaitOnAddress
WakeByAddressAll
WakeByAddressSingle
ole32
CoCreateFreeThreadedMarshaler
CoCreateInstance
CoInitializeEx
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
OleInitialize
RegisterDragDrop
RevokeDragDrop
dwmapi
DwmEnableBlurBehindWindow
DwmSetWindowAttribute
imm32
ImmGetCompositionStringW
ImmGetContext
ImmReleaseContext
shlwapi
SHCreateMemStream
bcryptprimitives
ProcessPrng
bcrypt
BCryptGenRandom
vcruntime140
_CxxThrowException
__C_specific_handler
__CxxFrameHandler3
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
_purecall
memcmp
memcpy
memmove
memset
wcsrchr
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___argv
_c_exit
_cexit
_configure_narrow_argv
_crt_atexit
_exit
_get_initial_narrow_environment
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
terminate
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-math-l1-1-0
__setusermatherr
ceil
floor
round
roundf
trunc
api-ms-win-crt-heap-l1-1-0
_callnewh
_set_new_mode
free
malloc
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-convert-l1-1-0
_ultow_s
_wtoi
wcstol
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscmp
wcslen
Name
.text
Size
2.9MB
Virtual Size
2.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
2.6MB
Virtual Size
2.6MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
2KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
389B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
362KB
Virtual Size
361KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
18KB
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ