GenP[.]v4[.]2[.]1[.]zip

Resubmissions

18/08/2026, 14:36

260818-ryz92shg47

18/08/2026, 14:16

260818-rldkhshf729

18/08/2026, 14:06

260818-rerhsshf559

18/08/2026, 14:03

260818-rcp7ystcqg5

Sharing

Copy URL Twitter E-mail

General

Target
GenP.v4.2.1.zip
Size 64.9MB
Sample260818-rerhsshf55
SHA256 bdf9d2e3eed14434a0f3549ea9ef221cb34682b5635d70a9f336ff7d51a7ef2d
MD5 9c0391e211cbd941df847d6bd66ffae2
SHA1 5ee864fe831c1ccc5c983d5bad69422a2732965e
SHA512 32cfbd96ba4ecbeec222ed5ccd851341e6023cae7f7381191918fc7457c7a603d562186777c36ba94a4128b36719b4b377b519f938c90b27e56b6e01f6011bf9
SSDEEP 1572864:W4s3U8g/0+4w7riB2gnpAzo8D7gZUUBBWkRUVL7unUJqcKbD4ZFMN:W46JI3HiYgnpAo8QfB7RUJKUne
TLSH
T126E73324E1C191FEC8082BEE6C58C6D7957FB6B27B9C460BAA6D97775A0C0275C0C6B0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

5^/10

Malware Config

Signatures

AutoIT Executable 1 IoCs

AutoIT scripts compiled to PE executables.

resource	yara_rule
static1/unpack001/GenP.v4.2.1/GenP-v4.2.1.exe	autoit_exe

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/GenP.v4.2.1/GenP-v4.2.1.exe

File Explorer

GenP.v4.2.1.zip

.zip 64.9MB
GenP.v4.2.1/GenP-4.2.1-info-sha256.md

1KB
GenP.v4.2.1/GenP-v4.2.1.exe

.exe 65.5MB
GenP.v4.2.1/GenP-v4.2.1.exe.hashes.txt

197B

GenP.v4.2.1.zip

SHA256 bdf9d2e3eed14434a0f3549ea9ef221cb34682b5635d70a9f336ff7d51a7ef2d
MD5 9c0391e211cbd941df847d6bd66ffae2
SHA1 5ee864fe831c1ccc5c983d5bad69422a2732965e
SHA512 32cfbd96ba4ecbeec222ed5ccd851341e6023cae7f7381191918fc7457c7a603d562186777c36ba94a4128b36719b4b377b519f938c90b27e56b6e01f6011bf9
SSDEEP 1572864:W4s3U8g/0+4w7riB2gnpAzo8D7gZUUBBWkRUVL7unUJqcKbD4ZFMN:W46JI3HiYgnpAo8QfB7RUJKUne
TLSH
T126E73324E1C191FEC8082BEE6C58C6D7957FB6B27B9C460BAA6D97775A0C0275C0C6B0
MD5 SHA1 SHA512 SSDEEP TLSH

GenP.v4.2.1/GenP-v4.2.1.exe

IMPHASH 0513f20aadda0586ba447b4e4d9f0b2e
SHA256 7248e21019e911b6a4ecbb143053c1297da4ce972697e00e06e72b8217fa43a8
MD5 026a72cbd92937aa0c3dfb095c3f7f9a
SHA1 01215a5346f8323914fd5f40d33d108f437baf77
SHA512 79335cf510c8f448afcb5357ad5b767d10491d820686ba41f90caa190d4bd4c8267adb9ce7a74d5097869a4ef70b1914ff5c5167c129bbc7bddbef3cbfa61e9d
SSDEEP 1572864:V+S7qMgBYwq05lE5ouNNEV2E5xMHeYR9A2XMzBvYv4x0g6Zbq/zCf:V+UjIn9EeuNNI2EQ39lXMlAg1+
TLSH
T128E73314B3E041ADFD1AE6768916C647D7B6BD522776860F16A86B736F33332290E330
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x64 arch:x64

AutoIT Executable

AutoIT scripts compiled to PE executables.
Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

147992

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

gethostbyname recv send socket inet_ntoa setsockopt ntohs WSACleanup WSAStartup sendto htons __WSAFDIsSet select accept listen bind inet_addr ioctlsocket recvfrom WSAGetLastError closesocket gethostname connect

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

winmm

timeGetTime waveOutSetVolume mciSendStringW

comctl32

ImageList_ReplaceIcon ImageList_Destroy ImageList_Remove ImageList_SetDragCursorImage ImageList_BeginDrag ImageList_DragEnter ImageList_DragLeave ImageList_EndDrag ImageList_DragMove InitCommonControlsEx ImageList_Create

mpr

WNetGetConnectionW WNetCancelConnection2W WNetUseConnectionW WNetAddConnection2W

wininet

HttpOpenRequestW InternetCloseHandle InternetOpenW InternetSetOptionW InternetCrackUrlW HttpQueryInfoW InternetQueryOptionW InternetConnectW HttpSendRequestW FtpOpenFileW FtpGetFileSize InternetOpenUrlW InternetReadFile InternetQueryDataAvailable

psapi

GetProcessMemoryInfo

iphlpapi

IcmpSendEcho IcmpCloseHandle IcmpCreateFile

userenv

DestroyEnvironmentBlock LoadUserProfileW CreateEnvironmentBlock UnloadUserProfile

uxtheme

IsThemeActive

kernel32

WaitForSingleObject HeapAlloc GetProcessHeap HeapFree Sleep GetCurrentThreadId MultiByteToWideChar MulDiv GetVersionExW IsWow64Process GetSystemInfo FreeLibrary LoadLibraryA GetProcAddress SetErrorMode GetModuleFileNameW WideCharToMultiByte lstrcpyW lstrlenW GetModuleHandleW QueryPerformanceCounter VirtualFreeEx OpenProcess VirtualAllocEx WriteProcessMemory ReadProcessMemory CreateFileW SetFilePointerEx SetEndOfFile ReadFile WriteFile FlushFileBuffers TerminateProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW SetFileTime GetFileAttributesW FindFirstFileW FindClose GetLongPathNameW GetShortPathNameW DeleteFileW FindNextFileW CopyFileExW MoveFileW CreateDirectoryW RemoveDirectoryW GetFullPathNameW QueryPerformanceFrequency LoadResource LockResource SizeofResource OutputDebugStringW GetTempPathW GetTempFileNameW DeviceIoControl LoadLibraryW GetLocalTime CompareStringW EnterCriticalSection DuplicateHandle GetStdHandle CreatePipe TerminateThread LoadLibraryExW FindResourceExW CopyFileW VirtualFree FormatMessageW GetExitCodeProcess GetPrivateProfileStringW WritePrivateProfileStringW GetPrivateProfileSectionW WritePrivateProfileSectionW GetPrivateProfileSectionNamesW FileTimeToLocalFileTime FileTimeToSystemTime SystemTimeToFileTime LocalFileTimeToFileTime GetDriveTypeW GetDiskFreeSpaceExW GetDiskFreeSpaceW GetVolumeInformationW SetVolumeLabelW CreateHardLinkW SetFileAttributesW CreateEventW SetEvent GetEnvironmentVariableW SetEnvironmentVariableW GlobalLock GlobalUnlock GlobalAlloc GetFileSize GlobalFree GlobalMemoryStatusEx Beep GetSystemDirectoryW HeapReAlloc HeapSize GetComputerNameW GetWindowsDirectoryW GetCurrentProcessId GetProcessIoCounters CreateProcessW GetProcessId SetPriorityClass VirtualAlloc SetCurrentDirectoryW IsDebuggerPresent GetCurrentDirectoryW lstrcmpiW GetLastError RaiseException InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetSystemTimeAsFileTime InitializeSListHead RtlUnwindEx RtlPcToFileHeader CreateThread GetCurrentProcess GetCurrentThread LeaveCriticalSection SetLastError TlsAlloc TlsGetValue TlsSetValue TlsFree ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind EncodePointer ExitProcess GetModuleHandleExW ExitThread ResumeThread FreeLibraryAndExitThread GetFileType FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect GetDateFormatW GetTimeFormatW LCMapStringW SetStdHandle GetConsoleOutputCP GetConsoleMode GetFileSizeEx ReadConsoleW GetTimeZoneInformation FindFirstFileExW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW CloseHandle WriteConsoleW SetSystemPowerState UnhandledExceptionFilter

user32

GetMonitorInfoW SetWindowLongW SetLayeredWindowAttributes FlashWindow GetClassLongPtrW TranslateAcceleratorW IsDialogMessageW GetSysColor InflateRect DrawFocusRect DrawTextW FrameRect DrawFrameControl FillRect PtInRect DestroyAcceleratorTable CreateAcceleratorTableW SetCursor GetWindowDC GetSystemMetrics SetWindowLongPtrW GetActiveWindow CharNextW wsprintfW RedrawWindow DrawMenuBar DestroyMenu SetMenu GetWindowTextLengthW CreateMenu IsDlgButtonChecked DefDlgProcW CallWindowProcW ReleaseCapture SetCapture CountClipboardFormats CloseClipboard GetClipboardData IsClipboardFormatAvailable OpenClipboard BlockInput GetMessageW LockWindowUpdate DispatchMessageW TranslateMessage PeekMessageW GetInputState UnregisterHotKey CharLowerBuffW MonitorFromPoint MonitorFromRect LoadImageW mouse_event ExitWindowsEx GetWindowLongW FindWindowExW EnumThreadWindows SetMenuDefaultItem InsertMenuItemW IsMenu TrackPopupMenuEx GetCursorPos DeleteMenu CheckMenuRadioItem GetMenuItemID GetMenuItemCount SetMenuItemInfoW GetMenuItemInfoW SetForegroundWindow IsIconic FindWindowW SetRect keybd_event SendInput GetAsyncKeyState SetKeyboardState GetKeyboardState GetKeyState VkKeyScanW LoadStringW DialogBoxParamW MessageBeep EndDialog SendDlgItemMessageW GetDlgItem SetWindowTextW CopyRect ReleaseDC GetDC EndPaint BeginPaint GetClientRect GetMenu DestroyWindow EnumWindows GetDesktopWindow IsWindow IsWindowEnabled IsWindowVisible InvalidateRect GetWindowLongPtrW GetWindowThreadProcessId AttachThreadInput GetFocus GetWindowTextW ScreenToClient SendMessageTimeoutW EnumChildWindows CharUpperBuffW GetClassNameW IsZoomed GetCaretPos GetSubMenu GetMenuStringW IsCharUpperW IsCharLowerW IsCharAlphaNumericW IsCharAlphaW GetKeyboardLayoutNameW ClientToScreen RegisterHotKey GetCursorInfo SetWindowPos CopyImage SetActiveWindow AdjustWindowRectEx GetParent GetDlgCtrlID SendMessageW MapVirtualKeyW PostMessageW GetWindowRect SetUserObjectSecurity SetClipboardData CloseDesktop CloseWindowStation OpenDesktopW SetProcessWindowStation GetProcessWindowStation OpenWindowStationW GetUserObjectSecurity MessageBoxW DefWindowProcW MoveWindow SetFocus PostQuitMessage KillTimer CreatePopupMenu RegisterWindowMessageW SetTimer ShowWindow CreateWindowExW RegisterClassExW LoadIconW LoadCursorW GetSysColorBrush GetForegroundWindow MessageBoxA DestroyIcon SystemParametersInfoW EmptyClipboard EnableWindow

gdi32

DeleteObject GetDeviceCaps ExtCreatePen EndPath StrokePath SetPixel CloseFigure LineTo AngleArc MoveToEx Ellipse PolyDraw GetTextExtentPoint32W CreateCompatibleBitmap BeginPath Rectangle SetViewportOrgEx GetObjectW SetBkMode RoundRect SetBkColor CreatePen CreateSolidBrush SetTextColor CreateFontW GetTextFaceW GetStockObject CreateDCW GetPixel DeleteDC GetDIBits StretchBlt SelectObject CreateCompatibleDC StrokeAndFillPath

comdlg32

GetSaveFileNameW GetOpenFileNameW

advapi32

RegEnumValueW RegDeleteValueW RegDeleteKeyW RegEnumKeyExW RegSetValueExW RegOpenKeyExW RegCloseKey RegQueryValueExW RegConnectRegistryW InitializeSecurityDescriptor InitializeAcl AdjustTokenPrivileges OpenThreadToken OpenProcessToken LookupPrivilegeValueW DuplicateTokenEx CreateProcessAsUserW CreateProcessWithLogonW GetLengthSid CopySid LogonUserW AllocateAndInitializeSid CheckTokenMembership FreeSid GetTokenInformation GetSecurityDescriptorDacl GetAclInformation GetAce RegCreateKeyExW AddAce SetSecurityDescriptorDacl InitiateSystemShutdownExW GetUserNameW

shell32

DragFinish DragQueryPoint ShellExecuteExW DragQueryFileW SHEmptyRecycleBinW SHGetPathFromIDListW SHBrowseForFolderW SHCreateShellItem SHGetDesktopFolder SHGetSpecialFolderLocation SHGetFolderPathW SHFileOperationW ExtractIconExW Shell_NotifyIconW ShellExecuteW

ole32

CoTaskMemAlloc CoTaskMemFree CLSIDFromString ProgIDFromCLSID CLSIDFromProgID OleSetMenuDescriptor MkParseDisplayName OleSetContainedObject CoCreateInstance IIDFromString StringFromGUID2 CreateStreamOnHGlobal OleInitialize OleUninitialize CoInitialize CoUninitialize GetRunningObjectTable CoGetInstanceFromFile CoGetObject CoInitializeSecurity CoCreateInstanceEx CoSetProxyBlanket

oleaut32

VariantChangeType DispCallFunc CreateStdDispatch CreateDispTypeInfo UnRegisterTypeLi UnRegisterTypeLibForUser RegisterTypeLibForUser RegisterTypeLi LoadTypeLibEx VariantCopyInd VariantTimeToSystemTime VariantClear VariantCopy SysAllocString SafeArrayCreateVector SafeArrayAllocDescriptorEx SafeArrayAllocData SafeArrayAccessData SafeArrayUnaccessData SafeArrayDestroyData VarR8FromDec SafeArrayDestroyDescriptor SysFreeString SysStringLen SafeArrayGetVartype OleLoadPicture QueryPathOfRegTypeLi VariantInit SysReAllocString

Name

.text

Size

740KB

Virtual Size

739KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

215KB

Virtual Size

215KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

20KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

29KB

Virtual Size

28KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

64.5MB

Virtual Size

64.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

GenP.v4.2.1.zip

GenP.v4.2.1/GenP-4.2.1-info-sha256.md

GenP.v4.2.1/GenP-v4.2.1.exe

wsock32

version

winmm

comctl32

mpr

wininet

psapi

iphlpapi

userenv

uxtheme

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

generic

GenP.v4.2.1/GenP-v4.2.1.exe.hashes.txt