Static task
static1
Behavioral task
behavioral1
Sample
PAK-Explorer/MsiLnch.exe
Resource
win11-20240709-en
Behavioral task
behavioral2
Sample
PAK-Explorer/PakExplorer.cfg
Resource
win11-20240709-en
Behavioral task
behavioral3
Sample
PAK-Explorer/PakExplorer.exe
Resource
win11-20240709-en
Behavioral task
behavioral4
Sample
PAK-Explorer/PakExplorer.tip
Resource
win11-20240709-en
Behavioral task
behavioral5
Sample
PAK-Explorer/ReadMe.txt
Resource
win11-20240709-en
General
-
Target
pak-explorer.rar
-
Size
228KB
-
MD5
91370a1721db402a9e2a62fa35986dfa
-
SHA1
719b13dde13f0f0f7b0dc7e5d5024f4b2ae9876a
-
SHA256
1cd18706fcb075b8695814fbf990f5cfda8b01accee8bc671939e3d66b9b15e8
-
SHA512
05d9590c6beea8931069458d4f7152aaffd249272ad342d28abcd2fbc9aeee8f23180e623a8b74929f8aaa9bf29a3de11b962e0afc1ee1d0a848d15254edf4fa
-
SSDEEP
3072:rggdvT1w77Wn1NuhGl0IBmO4CPtwBc2jeU81tNbwTo1m8gRaegHsWp2RD7265AeQ:0gRw76nehG3gOl6XS1DwU15TMC565AmE
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/PAK-Explorer/MsiLnch.exe unpack001/PAK-Explorer/PakExplorer.exe
Files
-
pak-explorer.rar.rar
-
PAK-Explorer/MsiLnch.exe.exe windows:4 windows x86 arch:x86
8d924639a9a511a5ea78a59db6e7a597
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapDestroy
HeapCreate
SearchPathA
CloseHandle
FlushFileBuffers
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
GetVersionExA
GetStringTypeA
GetStringTypeW
VirtualFree
HeapFree
RtlUnwind
WriteFile
GetLastError
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
HeapAlloc
VirtualAlloc
HeapReAlloc
GetProcAddress
LoadLibraryA
SetStdHandle
MultiByteToWideChar
LCMapStringA
LCMapStringW
user32
MessageBoxA
shell32
ShellExecuteA
Sections
.text Size: 20KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
PAK-Explorer/PakExplorer.cfg
-
PAK-Explorer/PakExplorer.exe.exe windows:4 windows x86 arch:x86
2c42b3e3aea62389bf5785173b3ede07
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapSize
GetTimeZoneInformation
LCMapStringA
LCMapStringW
GetACP
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
TerminateProcess
HeapAlloc
GetVersionExA
GetEnvironmentVariableA
GetCommandLineA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetModuleFileNameA
SetEnvironmentVariableA
GetFileSize
MulDiv
RaiseException
ExitProcess
RtlUnwind
GetStartupInfoA
HeapFree
SetErrorMode
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
GetCurrentDirectoryA
GetStringTypeExA
LocalFileTimeToFileTime
GetThreadLocale
UnlockFile
GetVolumeInformationA
MoveFileA
GetCurrentProcess
LockFile
FlushFileBuffers
GetCPInfo
DuplicateHandle
GetOEMCP
LocalReAlloc
GetProcessVersion
TlsGetValue
GlobalReAlloc
TlsSetValue
EnterCriticalSection
GlobalHandle
LeaveCriticalSection
TlsFree
InitializeCriticalSection
DeleteCriticalSection
TlsAlloc
GlobalFlags
LocalAlloc
SizeofResource
GetCurrentThread
GlobalAlloc
lstrcmpA
GetLastError
LocalFree
SetFileTime
GetDiskFreeSpaceA
GetFileTime
SetLastError
GetFullPathNameA
lstrcpynA
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetStdHandle
lstrlenA
IsBadWritePtr
MultiByteToWideChar
WideCharToMultiByte
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
GetFileType
lstrcatA
WriteFile
FreeLibrary
GetVersion
lstrcmpiA
GetCurrentThreadId
GlobalGetAtomNameA
GlobalDeleteAtom
GlobalAddAtomA
GlobalFindAtomA
GetProcAddress
lstrcpyA
GetModuleHandleA
SetUnhandledExceptionFilter
GlobalLock
GetStringTypeA
GetEnvironmentStringsW
SetHandleCount
GetShortPathNameA
CreateFileA
GetTempPathA
GetFileAttributesA
CreateDirectoryA
FindClose
FindNextFileA
FindFirstFileA
IsBadReadPtr
GetProfileStringA
GetTempFileNameA
DeleteFileA
CloseHandle
SetEndOfFile
SetFilePointer
ReadFile
CopyFileA
user32
SetCursorPos
BeginPaint
EndPaint
TabbedTextOutA
GrayStringA
InvalidateRect
DestroyMenu
SetRectEmpty
LoadAcceleratorsA
TranslateAcceleratorA
GetDesktopWindow
SetMenu
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
ClientToScreen
GetWindowDC
DestroyCursor
SetParent
IsRectEmpty
AppendMenuA
DeleteMenu
GetSystemMenu
PostQuitMessage
ShowOwnedPopups
ValidateRect
TranslateMessage
GetMessageA
LoadStringA
GetClassNameA
CharUpperA
RedrawWindow
GetSysColorBrush
SetRect
FindWindowA
InvertRect
GetDCEx
LockWindowUpdate
InsertMenuA
GetMenuStringA
DestroyIcon
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
IsChild
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
KillTimer
TrackPopupMenu
SetFocus
GetWindowTextA
GetDlgCtrlID
GetKeyState
WindowFromPoint
GetMenuState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetNextDlgTabItem
EndDialog
GetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetWindowRect
FillRect
DrawTextA
InflateRect
SetTimer
GetSystemMetrics
PeekMessageA
DispatchMessageA
GetParent
SetMenuDefaultItem
IsWindow
LoadCursorA
UpdateWindow
SetActiveWindow
MessageBeep
GetCursorPos
LoadMenuA
GetSubMenu
ScreenToClient
PostMessageA
LoadBitmapA
ReleaseCapture
GetCapture
SetCapture
SetCursor
ShowWindow
CopyRect
GetDC
ReleaseDC
GetClientRect
PtInRect
SetWindowTextA
IsDialogMessageA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
GetFocus
GetMenuCheckMarkDimensions
CheckMenuItem
ModifyMenuA
SetMenuItemBitmaps
DefWindowProcA
EnableMenuItem
CreateWindowExA
GetMenuItemCount
GetMenuItemID
GetWindowTextLengthA
SendMessageA
DrawFocusRect
GetSysColor
EnableWindow
WinHelpA
CharNextA
DefDlgProcA
ExcludeUpdateRgn
UnregisterClassA
HideCaret
IsWindowUnicode
ShowCaret
gdi32
GetObjectA
CreateCompatibleDC
BitBlt
SetTextColor
SetBkColor
GetClipBox
DeleteDC
CreateBitmap
RestoreDC
SelectObject
SaveDC
SetBkMode
SetMapMode
SetViewportOrgEx
ScaleViewportExtEx
SetViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExcludeClipRect
IntersectClipRect
SelectClipRgn
MoveToEx
LineTo
SetTextAlign
DeleteObject
CreateRectRgn
GetDeviceCaps
CreatePen
CreateSolidBrush
PtVisible
CreatePatternBrush
TextOutA
ExtTextOutA
RectVisible
PatBlt
Escape
CombineRgn
CreateRectRgnIndirect
SetRectRgn
GetTextMetricsA
CreateFontIndirectA
CreateCompatibleBitmap
GetCharWidthA
StretchDIBits
CreateFontA
OffsetViewportOrgEx
CreateDIBitmap
GetTextExtentPointA
GetTextExtentPoint32A
GetStockObject
comdlg32
GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
GetFileSecurityA
RegSetValueA
RegCreateKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegCloseKey
SetFileSecurityA
RegDeleteKeyA
RegDeleteValueA
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
shell32
ExtractIconA
SHFileOperationA
DragQueryFileA
DragAcceptFiles
ShellExecuteA
SHBrowseForFolderA
DragFinish
SHGetFileInfoA
SHGetPathFromIDListA
SHGetMalloc
comctl32
ImageList_Create
ImageList_Destroy
ImageList_AddMasked
ord17
Sections
.text Size: 264KB - Virtual size: 262KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 24KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
PAK-Explorer/PakExplorer.tip
-
PAK-Explorer/ReadMe.txt