Static task
static1
Behavioral task
behavioral1
Sample
PES CPK TOOL v1.0.0.1 BY STPN_17.rar
Resource
win10v2004-20220812-en
Behavioral task
behavioral2
Sample
PES CPK TOOL BY STPN_17/CpkMaker.dll
Resource
win10v2004-20220812-en
Behavioral task
behavioral3
Sample
PES CPK TOOL BY STPN_17/PES CPK Tool.exe
Resource
win10v2004-20220812-en
Behavioral task
behavioral4
Sample
PES CPK TOOL BY STPN_17/readme.txt
Resource
win10v2004-20220812-en
Behavioral task
behavioral5
Sample
PES CPK TOOL BY STPN_17/settings.ini
Resource
win10v2004-20220812-en
General
-
Target
PES CPK TOOL v1.0.0.1 BY STPN_17.rar
-
Size
142KB
-
MD5
dbfb48562f2c352d0dc7ab549fb93291
-
SHA1
cdd919b7b7b83030a97d83655d38106a552193ba
-
SHA256
d3b35c7efafda3dcaa00e962184607855f615ff72215d9c095daaf547d9921e1
-
SHA512
6d1d935cd03d6a261a5bf22e89f81a9ab2ae5ec8325f10004161e5946fa776394ae5a458fbae08abbbd6b8f9a20055393f60d7dced1073fb445f0370a78cb097
-
SSDEEP
3072:vaHA73RM43xZuKpGsdqDas0++PxgoMvxU0rRg+Y58zE2:vqAC43x3GswMlJgp5U0rRgUzE2
Malware Config
Signatures
Files
-
PES CPK TOOL v1.0.0.1 BY STPN_17.rar.rar
Password: StpN_17
-
PES CPK TOOL BY STPN_17/CpkMaker.DLL.dll windows x86
Password: StpN_17
3dc4f96040d479566a12143314f4f400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?_Incref@facet@locale@std@@QAEXXZ
?_Xout_of_range@std@@YAXPBD@Z
msvcr100
_except_handler4_common
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_crt_debugger_hook
qsort
exit
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
sscanf_s
vsprintf_s
strcat_s
strncat_s
strncpy_s
printf
strcpy_s
memset
__CxxFrameHandler3
_CxxThrowException
??2@YAPAXI@Z
memcpy_s
??_V@YAXPAX@Z
free
malloc
memmove
memcpy
??3@YAXPAX@Z
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
?what@exception@std@@UBEPBDXZ
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_fseeki64
_ftelli64
fflush
fwrite
fclose
fread
fopen_s
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
sprintf
fprintf
fopen
fseek
_cexit
__FrameUnwindFilter
_purecall
user32
wvsprintfW
kernel32
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
VirtualAlloc
VirtualQuery
GlobalMemoryStatusEx
VirtualFree
IsProcessorFeaturePresent
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
DecodePointer
EncodePointer
GetCurrentThreadId
OutputDebugStringW
mscoree
_CorDllMain
Sections
.text Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 199KB - Virtual size: 199KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 280KB - Virtual size: 1.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PES CPK TOOL BY STPN_17/PES CPK Tool.exe.exe windows x86
Password: StpN_17
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
mscoree
_CorExeMain
Sections
.text Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
PES CPK TOOL BY STPN_17/readme.txt
-
PES CPK TOOL BY STPN_17/settings.ini