pppwn_GUI_1[.]7[.]1[.]zip

Resubmissions

17-06-2024 12:37

240617-ptfcza1ckb 7

Sharing

Copy URL

Twitter E-mail

General

Target

pppwn_GUI_1.7.1.zip
Size

14.6MB
MD5

e375abbaadf6208d58eb46b91ec7f6ab
SHA1

466555f025b4a2a06e82b7979e5ec9ad089a2911
SHA256

276e29045208e8f5814cd2da88812b48ce30eb1f106a59756e2c4d26aaa6b489
SHA512

b93122f6dfbec0c11bb468d438112763d8a1d5d4c983e47649bd77e222f524fc541c5e43a4549bc8fe95f068261be5f330ebcb3951aadab0b72a91aa67235adf
SSDEEP

393216:WEm3wINArb97YYP21Mdd2SmASLRWk9d+oRdXs:WEowICvaX1MdEO2RxXQ

Score

7^/10

pyinstaller upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
static1/unpack001/pppwn GUI/Unpacked Version/pppwn/exploit/pppwn_.exe	upx

Detects Pyinstaller 1 IoCs

pyinstaller

resource	yara_rule
static1/unpack001/pppwn GUI/Unpacked Version/pppwn/PPPwn GUI 1.7.1.exe	pyinstaller

Unsigned PE 4 IoCs

Checks for missing Authenticode signature.

resource
unpack001/pppwn GUI/PPPwn GUI 1.7.1.exe
unpack001/pppwn GUI/Unpacked Version/pppwn/DevComponents.DotNetBar2.dll
unpack001/pppwn GUI/Unpacked Version/pppwn/PPPwn GUI 1.7.1.exe
unpack001/pppwn GUI/Unpacked Version/pppwn/exploit/pppwn_.exe

Files

pppwn_GUI_1.7.1.zip
.zip
pppwn GUI/PPPwn GUI 1.7.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Lee\Documents\Visual Studio 2013\Projects\PPPwn - Copy - Copy\PPPwn\obj\Debug\PPPwn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: - Virtual size: 599KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.w(;
Size: - Virtual size: 5.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.%yV
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Q\L
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pppwn GUI/ReadMe.txt
pppwn GUI/Unpacked Version/pppwn/DevComponents.DotNetBar2.dll
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.textxc
Size: 4.9MB - Virtual size: 4.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.datax
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 86B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
pppwn GUI/Unpacked Version/pppwn/PPPwn GUI 1.7.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Users\Lee\Documents\Visual Studio 2013\Projects\PPPwn - Unpacked\PPPwn\obj\Debug\PPPwn.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 8.4MB - Virtual size: 8.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
pppwn.pyc
pppwn GUI/Unpacked Version/pppwn/exploit/pppwn_.exe
.exe windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: - Virtual size: 1.2MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 439KB - Virtual size: 440KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX2
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_1000.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_1001.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_1050.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_1070.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_1071.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_1100.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_750.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_751.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_755.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_800.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_801.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_803.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_850.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_852.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_900.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_903.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_904.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_950.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_951.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage1/stage1_960.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_1000.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_1001.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_1050.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_1070.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_1071.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_1100.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_750.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_751.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_755.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_800.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_801.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_803.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_850.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_852.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_900.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_903.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_904.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_950.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_951.bin
pppwn GUI/Unpacked Version/pppwn/exploit/stage2/stage2_960.bin

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: - Virtual size: 599KB

.w(; Size: - Virtual size: 5.1MB

.%yV Size: 512B - Virtual size: 8B

.Q\L Size: 4.5MB - Virtual size: 4.5MB

.rsrc Size: 102KB - Virtual size: 102KB

.reloc Size: 512B - Virtual size: 12B

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

File Characteristics

Imports

mscoree

Sections

.textxc Size: 4.9MB - Virtual size: 4.9MB

.datax Size: 4KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 86B

.reloc Size: 4KB - Virtual size: 12B

.rsrc Size: 4KB - Virtual size: 1KB

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

Sections

.text Size: 8.4MB - Virtual size: 8.4MB

.rsrc Size: 102KB - Virtual size: 102KB

.reloc Size: 512B - Virtual size: 12B

Headers

DLL Characteristics

File Characteristics

Sections

UPX0 Size: - Virtual size: 1.2MB

UPX1 Size: 439KB - Virtual size: 440KB

UPX2 Size: 1KB - Virtual size: 4KB

.text
Size: - Virtual size: 599KB

.w(;
Size: - Virtual size: 5.1MB

.%yV
Size: 512B - Virtual size: 8B

.Q\L
Size: 4.5MB - Virtual size: 4.5MB

.rsrc
Size: 102KB - Virtual size: 102KB

.reloc
Size: 512B - Virtual size: 12B

.textxc
Size: 4.9MB - Virtual size: 4.9MB

.datax
Size: 4KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 86B

.reloc
Size: 4KB - Virtual size: 12B

.rsrc
Size: 4KB - Virtual size: 1KB

.text
Size: 8.4MB - Virtual size: 8.4MB

.rsrc
Size: 102KB - Virtual size: 102KB

.reloc
Size: 512B - Virtual size: 12B

UPX0
Size: - Virtual size: 1.2MB

UPX1
Size: 439KB - Virtual size: 440KB

UPX2
Size: 1KB - Virtual size: 4KB