RateCheckUpdater_exe_sample_pw-infected.zip
- SHA256 6ee351131818d8de11898b1087d6185da7bec85f53e96a48e0aba6317137dd5f
Password
infected
Static task
static1
Behavioral task
behavioral1
Sample
RateCheckUpdater.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
11 signatures
150 seconds
General
- Target RateCheckUpdater_exe_sample_pw-infected.zip
- Size 1.1MB
- Sample261113-hm325agy4v
- SHA256 6ee351131818d8de11898b1087d6185da7bec85f53e96a48e0aba6317137dd5f
- MD5 0fcc59db326b08e50dbff6e7d5006490
- SHA1 37eb05f344ad2ef4223e4df6d5e5a70471f63658
- SHA512 154ed4aa36e240044ad50fc6369413ccf7746e95b9f526075682a3102684ec8382232aa4040bdb3e615d972a4effffcf4ce2bf899460c75e969cc806dc5f4685
- SSDEEP 24576:sr71MVf/jSowZQK+raEPrpkxLQrLN+SfNNci86Gkvxg4:sH1MV3jLMQKREPQSHD86GMh
- TLSH T19D3533DAF1C3A4E38C415F209AD49BF904F0959C2F32EF4CA0B19986491B785D4EF7A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
File Explorer
-
RateCheckUpdater_exe_sample_pw-infected.zip.zip 1.1MB
-
README.txt677B
-
RateCheckUpdater.exe_.exe 2.3MB
README.txt
- SHA256 fa814b058d2d17732b1a92f88b7f46a6f85e13b320e35be4f4aff56c1f4039c0
- MD5 5e8fed865061b1445ebe2ed9135159b5
- SHA1 7b764026552980f9aa1710f4debc3011252876ed
- SHA512 9a31c671d773df8af687ebf5ab3bed91463d3e91787d69fd5187dae262cb2e5a8a556d71d033771e818d6245b5445290b8f59448fdde0719b0c8c51aa211b27c
- TLSH T1A4019E02BCFE53ED7662ECF1FC649A90C169F8C8479B901D16CB08948147A5B519E7D4
- MD5 SHA1 SHA512 TLSH
RateCheckUpdater.exe_
- IMPHASH 97124d17714ceaf973cdf451e9fa1fd8
- SHA256 610a40b707952448c891ea6b9adb17df068115c1f5f97744a7ecbc9fdfc9c0ab
- MD5 dc02526dbc56d5db9d98a3f465e23d5d
- SHA1 a91d51370b36503b4f3b428f6cfa4b474efbd757
- SHA512 bc99e32d4b45025ab8f83fc3f908a44ec08911b1045113641059d14b7e83e9acd8f63265a5151faa30c3dd5e35d78f052bc3c4d318d5e534c9dca1da5312c015
- SSDEEP 49152:54U27KdgjlCNjX8wmCi5LOm484qw5JgH5W+uV71beSNWg9:54U27KCUNnmCqOmp47IIV71beSNWE
- TLSH T1E2B56C1236514362C1E706319A9CF739E1AD7DF04FBD81C766C0EAFB29355C28A39A27
- MD5 SHA1 SHA512 SSDEEP TLSH
Digest
50:67:87:ec:ab:aa:88:92:f9:d5:58:81:02:51:46:16:1f:96:72:67:98:89:20:a4:0d:36:87:fb:c8:1b:e5:c8
Digest Algorithm
sha256
PE Digests Matches
Trusted
Signing Certificate
CN=I Show Soft Co.Ltd,O=I Show Soft Co.Ltd,L=Songpa District,ST=Seoul,C=KR
Chains
Feb 23, 2026
CN=I Show Soft Co.Ltd,O=I Show Soft Co.Ltd,L=Songpa District,ST=Seoul,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=I Show Soft Co.Ltd,O=I Show Soft Co.Ltd,L=Songpa District,ST=Seoul,C=KR
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Subject
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Serial Number
08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Apr 29, 2021 - Apr 28, 2036
Subject
CN=I Show Soft Co.Ltd,O=I Show Soft Co.Ltd,L=Songpa District,ST=Seoul,C=KR
Serial Number
07:72:e2:80:15:cd:19:1f:df:93:2d:c3:ae:f0:56:e1
Issuer
CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Oct 24, 2025 - Nov 22, 2026
Subject
CN=DigiCert SHA256 RSA4096 Timestamp Responder 2025 1,O=DigiCert\, Inc.,C=US
Serial Number
0a:80:ef:18:4b:8d:f1:05:82:d1:c4:76:a7:95:74:68
Issuer
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
Jun 4, 2025 - Sep 3, 2036
Subject
CN=DigiCert Trusted G4 TimeStamping RSA4096 SHA256 2025 CA1,O=DigiCert\, Inc.,C=US
Serial Number
0d:c7:ac:57:05:ff:21:99:2e:40:43:22:0c:3a:49:86
Issuer
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Ext Key Usages
ExtKeyUsageTimeStamping
Revocation Status
Not revoked
Timespan
May 7, 2025 - Jan 14, 2038
Subject
CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US
Serial Number
0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a
Issuer
CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US
Key Usages
KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign
Revocation Status
Not revoked
Timespan
Aug 1, 2022 - Nov 9, 2031
Minor OS version
0
Major OS version
6
Entry point
1530074
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\dev\under40\ratecheck-win-wrapper\Release\RateCheckUpdater.pdb
kernel32
EnumSystemLocalesW
IsValidLocale
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
GetTimeZoneInformation
GetACP
GetSystemInfo
HeapQueryInformation
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
GetCommandLineA
RtlUnwind
GetCPInfo
LCMapStringEx
GetStringTypeW
RaiseException
OutputDebugStringW
ReadConsoleW
FindFirstFileExW
FindNextFileW
VirtualQuery
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
FindResourceExW
IsValidCodePage
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
VirtualProtect
GlobalGetAtomNameW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
FindFirstFileW
FindClose
SetFilePointer
GetFileSize
GetThreadLocale
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetCurrentDirectoryW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
CompareStringW
GlobalFindAtomW
EncodePointer
GetCurrentProcessId
GlobalAddAtomW
ResumeThread
SetThreadPriority
VerifyVersionInfoW
VerSetConditionMask
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
LoadLibraryA
lstrcpyW
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryW
LoadLibraryExW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
OutputDebugStringA
SetLastError
CopyFileW
FormatMessageW
MulDiv
GlobalFree
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GetWindowsDirectoryW
GetSystemDirectoryW
MoveFileW
Process32NextW
TerminateProcess
OpenProcess
Process32FirstW
CreateToolhelp32Snapshot
WriteFile
CreateFileW
FileTimeToSystemTime
DeleteFileW
GetTempPathW
ReadFile
CreatePipe
SystemTimeToFileTime
GetTickCount64
CreateDirectoryW
GetFileAttributesW
GetEnvironmentVariableW
GetModuleFileNameW
Sleep
LocalFree
GetCommandLineW
FindResourceW
LoadResource
LockResource
SizeofResource
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetLocalTime
HeapFree
WideCharToMultiByte
MultiByteToWideChar
ReleaseMutex
CloseHandle
CreateMutexW
SetErrorMode
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteConsoleW
user32
GetNextDlgGroupItem
IntersectRect
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
KillTimer
SetTimer
RealChildWindowFromPoint
DeleteMenu
CopyImage
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetTopWindow
GetClassLongW
EqualRect
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
SetForegroundWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
IsDialogMessageW
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
MessageBeep
GetDlgCtrlID
CheckDlgButton
MoveWindow
ShowWindow
UnhookWindowsHookEx
PtInRect
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
GetDC
TabbedTextOutW
GetIconInfo
DrawTextExW
DrawTextW
GetClassNameW
InvalidateRect
UpdateWindow
GetLastActivePopup
GetWindowThreadProcessId
MessageBoxW
SetCursor
ShowOwnedPopups
CallNextHookEx
CopyIcon
GetMenuItemInfoW
GetMenuDefaultItem
UnregisterClassW
PostQuitMessage
PostMessageW
EnableWindow
GetMenuStringW
SetWindowsHookExW
GetCursorPos
ValidateRect
GetKeyState
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
EnumDisplayMonitors
GetMonitorInfoW
SystemParametersInfoW
LoadCursorW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DestroyIcon
LoadImageW
SetParent
MonitorFromPoint
TrackMouseEvent
IsZoomed
CharUpperW
GetAsyncKeyState
LoadMenuW
GetSystemMenu
NotifyWinEvent
CopyRect
SetRectEmpty
SetCursorPos
UnionRect
BringWindowToTop
CreatePopupMenu
LockWindowUpdate
DestroyMenu
EnableScrollBar
SetFocus
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
RemoveMenu
SetWindowPos
SetWindowContextHelpId
GetParent
RegisterClipboardFormatW
GetWindow
MapDialogRect
RegisterWindowMessageW
SendMessageW
DrawEdge
DrawFrameControl
IsWindowVisible
GetFocus
GetSystemMetrics
DrawStateW
SetWindowRgn
RedrawWindow
GetClientRect
GetWindowRect
MapWindowPoints
GetSysColor
GetSysColorBrush
DrawFocusRect
FillRect
InflateRect
OffsetRect
IsRectEmpty
DrawIconEx
IsWindow
DestroyWindow
CreateDialogIndirectParamW
EndDialog
GetDlgItem
GetNextDlgTabItem
GetActiveWindow
IsWindowEnabled
SetActiveWindow
GetWindowLongW
GetDesktopWindow
DefWindowProcW
GetClassInfoW
SetLayeredWindowAttributes
SetMenuDefaultItem
ModifyMenuW
DestroyAcceleratorTable
SetClassLongW
GetDoubleClickTime
GetUpdateRect
SendDlgItemMessageA
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
MapVirtualKeyW
LoadAcceleratorsW
CreateAcceleratorTableW
UpdateLayeredWindow
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
InvertRect
HideCaret
DrawIcon
GetWindowRgn
DestroyCursor
CreateMenu
GetComboBoxInfo
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
IsCharLowerW
PostThreadMessageW
IsClipboardFormatAvailable
FrameRect
CharUpperBuffW
SubtractRect
GetKeyNameTextW
GrayStringW
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectW
CreatePen
CreatePatternBrush
DeleteObject
EnumFontFamiliesW
GetStockObject
GetTextCharsetInfo
GetObjectW
CreateBitmap
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkColor
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextColor
SetTextAlign
BitBlt
TextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetRgnBox
GetMapMode
SetRectRgn
DPtoLP
RealizePalette
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateRoundRectRgn
Rectangle
OffsetRgn
RoundRect
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetViewportOrgEx
LPtoDP
GetWindowOrgEx
SetPixelV
GetTextFaceW
GetTextMetricsW
Polygon
CreatePolygonRgn
ExtTextOutW
PatBlt
GetTextExtentPoint32W
GetTextColor
GetBkColor
Ellipse
CreateSolidBrush
CreateRectRgnIndirect
CreateRectRgn
CreateHatchBrush
CreateEllipticRgn
CombineRgn
GetDeviceCaps
CreateDCW
CopyMetaFileW
MoveToEx
Polyline
DeleteDC
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterW
ClosePrinter
DocumentPropertiesW
advapi32
RegDeleteValueW
RegQueryValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegSetValueExW
RegOpenKeyExW
RegDeleteKeyW
RegCreateKeyExW
FreeSid
CheckTokenMembership
AllocateAndInitializeSid
RegCloseKey
shell32
ShellExecuteExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteW
DragFinish
DragQueryFileW
SHGetFileInfoW
CommandLineToArgvW
comctl32
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathIsUNCW
PathFindFileNameW
uxtheme
IsThemeBackgroundPartiallyTransparent
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
DrawThemeParentBackground
IsAppThemed
DrawThemeText
GetWindowTheme
GetThemePartSize
GetThemeSysColor
ole32
OleLockRunning
CoInitializeEx
CoRevokeClassObject
CoRegisterMessageFilter
OleCreateMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleDestroyMenuDescriptor
OleTranslateAccelerator
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateStreamOnHGlobal
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
IsAccelerator
oleaut32
LoadTypeLi
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantChangeType
SysFreeString
VariantCopy
VarBstrFromDate
VariantClear
VariantInit
SysAllocString
SysAllocStringLen
SysStringLen
oledlg
OleUIBusyW
urlmon
URLDownloadToFileW
gdiplus
GdipGetImagePalette
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdiplusShutdown
GdipAlloc
GdipFree
GdiplusStartup
GdipCloneImage
GdipDisposeImage
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipBitmapUnlockBits
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipDeleteGraphics
winhttp
WinHttpSetOption
WinHttpQueryHeaders
WinHttpReadData
WinHttpQueryDataAvailable
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpOpenRequest
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
Name
.text
Size
1.7MB
Virtual Size
1.7MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
389KB
Virtual Size
389KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
25KB
Virtual Size
43KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.fptable
Size
512B
Virtual Size
128B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
147KB
Virtual Size
146KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=28, id=259, version=33140,
count=40, id=260, version=33140,
count=206, id=261, version=33140,
count=1, id=262, version=33140,
count=41, id=257, version=33140,
count=808, id=1, productName=Unmarked objects,
count=25, id=259, version=35207,
count=20, id=260, version=35207,
count=404, id=261, version=35207,
count=3, id=265, version=35215,
count=1, id=255, version=35215,
count=1, id=151,
count=1, id=258, version=35215,