Free-PakBypass.7z
- SHA256 d71ef5709b2bd43797ee644663c486132df2f597d474ed60ee0447205bf0eff9
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Free-PakBypass.7z
Resource
win10v2004-20260513-en
windows10-2004-x64
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Free-PakBypass.7z
Resource
win11ltsc2024-20260710-en
windows11-ltsc_2024-x64
8 signatures
150 seconds
Behavioral task
behavioral3
Sample
Free-PakBypass.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
Free-PakBypass.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target Free-PakBypass.7z
- Size 20.6MB
- Sample260802-sd2stavhlf
- SHA256 d71ef5709b2bd43797ee644663c486132df2f597d474ed60ee0447205bf0eff9
- MD5 935c3ea275d8b50bfe2e1f5935519518
- SHA1 67a523b722603b8b39a3ed358255825bf1e82282
- SHA512 5e48d70154cd812917b520ad60a3dda25e4786287b1a6f292ab60d6c1258d9da2a7c35bc4517381c7746249003ad2a8b6d3ce53d619a01682bbccaa8ac8152fa
- SSDEEP 393216:dhHzgOYVJzyf1Y0/ymdQYnKwDYM5qoe1cNrSg77H7eL7LB+ybCcb+Tq:dhH0xkqDmdQwNqXcNBH7ekyGcbp
- TLSH T1FF2733FBD249FBE263F50B71E4770E289C71155AFFBE6E11AA8ED3411CD00EA0842919
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Free-PakBypass.exe
File Explorer
-
Free-PakBypass.7z.7z 20.6MB
-
Free-PakBypass.exe.exe 24.9MB
Free-PakBypass.exe
- IMPHASH 488f674c6019d4aa122bfdeaaf311084
- SHA256 d29a2aa9d5077e234f910106c138fa55745b9847f486f04803f31909b8913cbe
- MD5 a8b048565f82608c6eb165df56fd7034
- SHA1 9b6d20010c1eee201cc003bd1773ba4beabce703
- SHA512 a2965bfa97b23b472901ed64ee35033a6712d0271c5356d4b480315c8c13e5a06337755908fdc854fcbaed4ac8ee63324c9128a32333d5862f68c2f475fb4d60
- SSDEEP 393216:wmJVZ9x9ku6st4f1atU4317VqWCZNdMJPKD0/GAyflIypETC6BXs/o3W2EC:w4Z9kwucH31jCUygvcmu6B8g3jEC
- TLSH T1154723E7AAD973E4E3934D38D28B138773C1215EDA974A1E31CAD8032521D978746E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
29729057
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WaitForSingleObject
advapi32
RegQueryValueExW
shell32
ShellExecuteW
winhttp
WinHttpQueryDataAvailable
iphlpapi
GetAdaptersAddresses
setupapi
SetupDiEnumDeviceInfo
newdev
UpdateDriverForPlugAndPlayDevicesW
ws2_32
WSAGetLastError
secur32
FreeCredentialsHandle
crypt32
CertAddCertificateContextToStore
ncrypt
NCryptFinalizeKey
ntdll
RtlLookupFunctionEntry
Name
.text
Size
Virtual Size
391KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
Virtual Size
159KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
Virtual Size
17KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
Virtual Size
29KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
Virtual Size
500B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.fptable
Size
Virtual Size
256B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.>U-
Size
Virtual Size
15.4MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
. H9
Size
23KB
Virtual Size
23KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.\BH
Size
24.8MB
Virtual Size
24.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
105KB
Virtual Size
105KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ