59c50c50df819410c0f5ee039e5934c273d3aae71a4d1e2b45690c893e0e201d

Resubmissions

08/08/2024, 14:15

max time kernel
15s
max time network
20s
platform
windows7_x64
resource
win7-20240704-en
resource tags

arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
submitted
08/08/2024, 14:15

Target

PPPwnGo-v2.8/PPPwn/CPP/pppwn.exe
Size

554KB
MD5

199f3d26b818603f961b0995aa5271b4
SHA1

e880b01c4773ad16c9869a11fd0892efe0d9f0b8
SHA256

764ed91127f50370a3c24f7e3bf975c726dec9dfe01c855c461572087a595250
SHA512

8dded7122d10e92d96e173c567eb98282a6554dd36baa9c9ced799257fc329a2806e6a83e28e9dedcae80f3a669437ab5852b446707d31d4723b0a69e3b06b8f
SSDEEP

12288:XoTVroZk/NiDnKVZ9dwHBdkl+tLE3RwPz3BtYJKD+qNkfN9AoS46:XoB0Z8N6cCTkl+GCLnNDaf36

Score

7^/10

upx

UPX packed file 2 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
behavioral3/memory/3004-0-0x0000000000CC0000-0x0000000000EE5000-memory.dmp	upx
behavioral3/memory/3004-1-0x0000000000CC0000-0x0000000000EE5000-memory.dmp	upx

C:\Users\Admin\AppData\Local\Temp\PPPwnGo-v2.8\PPPwn\CPP\pppwn.exe
"C:\Users\Admin\AppData\Local\Temp\PPPwnGo-v2.8\PPPwn\CPP\pppwn.exe"
1⤵
PID:3004

memory/3004-0-0x0000000000CC0000-0x0000000000EE5000-memory.dmp

Filesize
2.1MB

Download
memory/3004-1-0x0000000000CC0000-0x0000000000EE5000-memory.dmp

Filesize
2.1MB

Download