General

  • Target
    U-King-Setup.exe
  • Size 4.9MB
  • Sample261113-jrhsesht2x
  • SHA256 8879d9ed1a55fe248773b9ff07303977702c908625e2fe63a6df638ac605a943
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10

Malware Config

Signatures

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • U-King-Setup.exe
    .exe 4.9MB
  • $PLUGINSDIR/NSISdl.dll
    .dll 15KB
  • $PLUGINSDIR/StartMenu.dll
    .dll 7KB
  • $PLUGINSDIR/System.dll
    .dll 12KB
  • $PLUGINSDIR/modern-wizard.bmp
    25KB
  • $PLUGINSDIR/nsDialogs.dll
    .dll 9KB
  • $PLUGINSDIR/nsis_tauri_utils.dll
    .dll 33KB
  • skills/aigc/MODELS.md
    4KB
  • skills/aigc/README.md
    1KB
  • skills/aigc/SKILL.md
    29KB
  • skills/aigc/scripts/gen-asr.mjs
    .sh .js 10KB
  • skills/aigc/scripts/gen-batch.mjs
    .sh .js 7KB
  • skills/aigc/scripts/gen-bgm.mjs
    .sh .js 6KB
  • skills/aigc/scripts/gen-image.mjs
    .sh .js 10KB
  • skills/aigc/scripts/gen-music.mjs
    .sh .js 30KB
  • skills/aigc/scripts/gen-reel.mjs
    .sh .js 27KB
  • skills/aigc/scripts/gen-stitch.mjs
    .sh .js 9KB
  • skills/aigc/scripts/gen-tts.mjs
    .sh .js 8KB
  • skills/aigc/scripts/gen-video.mjs
    .sh .js 21KB
  • skills/aigc/scripts/list-models.mjs
    .sh .js 5KB
  • skills/browse/SKILL.md
    2KB
  • skills/browse/scripts/fetch-page.mjs
    .sh .js 5KB
  • skills/browse/scripts/open-url.mjs
    .sh .js 2KB
  • skills/cad/SKILL.md
    4KB
  • skills/cad/scripts/gen-dxf.mjs
    .sh .js 14KB
  • skills/docx/SKILL.md
    2KB
  • skills/docx/scripts/gen-docx.mjs
    .sh .js 18KB
  • skills/install-windows.json
    .ps1 71KB
  • skills/mail/SKILL.md
    3KB
  • skills/mail/scripts/gen-eml.mjs
    .sh .js 9KB
  • skills/officeedit/SKILL.md
    4KB
  • skills/officeedit/scripts/edit-office.mjs
    .sh .js 17KB
  • skills/officeread/SKILL.md
    4KB
  • skills/officeread/scripts/read-doc.py
    .py .sh 8KB
  • skills/pdf/SKILL.md
    4KB
  • skills/pdf/scripts/to-pdf.mjs
    .sh .js 14KB
  • skills/ppt/SKILL.md
    4KB
  • skills/ppt/scripts/gen-pptx.mjs
    .sh .js 32KB
  • skills/teamwork/README.md
    1KB
  • skills/teamwork/SKILL.md
    4KB
  • skills/teamwork/scripts/call-agent.mjs
    .sh .js 13KB
  • skills/vision/SKILL.md
    23KB
  • skills/vision/bench/.gitignore
    11B
  • skills/vision/bench/cases.json
    1KB
  • skills/vision/bench/doc-cases.json
    2KB
  • skills/vision/bench/gen-doc-fixtures.mjs
    .sh .js 6KB
  • skills/vision/bench/gen-fixtures.mjs
    .sh 8KB
  • skills/vision/scripts/bench.mjs
    .sh .js 8KB
  • skills/vision/scripts/doc-bench.mjs
    .sh .js 6KB
  • skills/vision/scripts/read-pdf.py
    .py .sh 10KB
  • skills/vision/scripts/see-image.mjs
    .sh .js 36KB
  • skills/web/SKILL.md
    1KB
  • skills/wechatmp/SKILL.md
    768B
  • skills/wechatmp/scripts/render-mp.mjs
    .sh 1KB
  • skills/workbench/SKILL.md
    7KB
  • skills/xlsx/SKILL.md
    3KB
  • skills/xlsx/scripts/gen-xlsx.mjs
    .sh .js 19KB
  • u-king-mini.exe
    .exe 12.5MB

U-King-Setup.exe

  • IMPHASH 46ce5c12b293febbeb513b196aa7f843
  • SHA256 8879d9ed1a55fe248773b9ff07303977702c908625e2fe63a6df638ac605a943
  • MD5 SHA1 SHA512 SSDEEP TLSH
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
4
Entry point
13983
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE
PDB paths