59c50c50df819410c0f5ee039e5934c273d3aae71a4d1e2b45690c893e0e201d

Resubmissions

08/08/2024, 14:15

max time kernel
122s
max time network
123s
platform
windows7_x64
resource
win7-20240705-en
resource tags

arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
submitted
08/08/2024, 14:15

Target

PPPwnGo-v2.8/PPPwn/CPP/Beta/pppwn.exe
Size

554KB
MD5

520f94f2f218bd549e0dc2fbb9201bc9
SHA1

c063440340660217923fc03dbe5966d71d56f842
SHA256

dea58af102ae22a3dd36d460177b0c2a5534b922412fccbed43fea4e2813d569
SHA512

8694be7db073130563305e975c3edf06c50e00df1e894b2243fcd4c25e93f3a298856ba90648b3fa03d84c8cb6c85644b36f8cb38055656236a9853ccbd50900
SSDEEP

12288:AOyWxSUaFq5LXWxTIdqapBs8XX2G4H57BJSZ0p9CwiCoSO7:IWxG8LXWx5OSEB4H9y0p9Cwo7

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral1/memory/2676-0-0x0000000000210000-0x0000000000435000-memory.dmp	upx
behavioral1/memory/2676-1-0x0000000000210000-0x0000000000435000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\PPPwnGo-v2.8\PPPwn\CPP\Beta\pppwn.exe
"C:\Users\Admin\AppData\Local\Temp\PPPwnGo-v2.8\PPPwn\CPP\Beta\pppwn.exe"
1⤵
PID:2676

memory/2676-0-0x0000000000210000-0x0000000000435000-memory.dmp

Filesize
2.1MB

Download
memory/2676-1-0x0000000000210000-0x0000000000435000-memory.dmp

Filesize
2.1MB

Download