ZapretGUI-0.2.0.zip
- SHA256 776a0f58ae10a4f65d54a944b0d71206effb187de7e5b8f03680351b1dcb9223
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZapretGUI.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
ZapretGUI.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
0 signatures
150 seconds
General
- Target ZapretGUI-0.2.0.zip
- Size 317KB
- Sample261027-1pyjjaee58
- SHA256 776a0f58ae10a4f65d54a944b0d71206effb187de7e5b8f03680351b1dcb9223
- MD5 357a95a23539a513e9e1ef66c51ca58c
- SHA1 1675ac2232dfe718aaa36181d52394437da3debd
- SHA512 766367f5065e3a36ed18d1f95e37e8a29a8c96626e26063e36cd141c391e487363c41eaad0058eff81e3c3f79422c95402a858f4c04403353220d42542b04e9f
- SSDEEP 6144:hMAsiS62zaLelbw3WcyBQIlgNfW6FzHWc/pbIoUv/T5sAOAtF0Yc8o2pUL:dGjbwWxBQIlgQ6FbWIqfv/9ssLxoyw
- TLSH T1866423080640EB874BA4F83FC2579D05FC972AB9E3EA31371651A4C45891EB47F6B9BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ZapretGUI.exe
File Explorer
-
ZapretGUI-0.2.0.zip.zip 317KB
-
LICENSE1KB
-
LICENSE-json.txt1KB
-
README.md6KB
-
ZapretGUI.exe.exe 764KB
LICENSE
- SHA256 48ed71b64708b9dfc53b1ecf6d363635be745f56a726fec7f9fc273ee8ab939f
- MD5 912e1ecc0ff7ca25812836b4f97675a4
- SHA1 5a47886e9249c69aa7c6719ed68e774a8fca2f7d
- SHA512 df208fb1f88b38a86edc3f9509e82b1b17e4bedc8a6eb9451ffb437c93a0ca4b01485f0b4891a6d73ad4a5aef5ab54ebada0f774963eaa8642335232621f6a37
- TLSH T17A11421E72510762189B23605578ACD9F22BB25A7A5F2A84246DF245632A4ACC5FB840
- MD5 SHA1 SHA512 TLSH
LICENSE-json.txt
- SHA256 46a65cffd1ea955132d95a8dd921640714a8d6b537d2e4e482d31145ae95b603
- MD5 3b489645de9825cca5beeb9a7e18b6eb
- SHA1 8dfc756770a15a88a19e9dbc62529dd11258be8b
- SHA512 6403831c95682ad5fd02fce207712ec8acad48ea1e947fd3b7838be84d65c044d36ec2da59a462cf2b44afaca0786b67d27edb0d2ffba14e297778a4f4085e11
- TLSH T12011821EB29147621C9B13605678A8D5F23BB25F7A9F2A84246EF241233A06CD1FF844
- MD5 SHA1 SHA512 TLSH
README.md
- SHA256 b5484ad3a9eae10201d41b1a0b67bfc741974980a3fd218200ab8bb76f134ed3
- MD5 fb6b0dece80000030f82c11437f11d36
- SHA1 96b5aa3199e0d711be436747d752f9545ff6795e
- SHA512 3f1ae0b5c6755a7e7a7abc76c21ca1d79b10d0d89e37bb25657d22f6123d6e4ee71dfd822145518ac78d981e9f2740956c4e669a1a6bb793720a104030421520
- SSDEEP 96:vrYaWkvMRgMcG5B6sxI/VhVG7EVIG5j+D42MmmeK+wNAzy5/n:vrW9c6B6sxQWVM0ImNK+QV5/n
- TLSH T193E1786156AD50DE1701B06BDD08BE0D7DAB44FE7FA7536A00642DAE38F2038C63E759
- MD5 SHA1 SHA512 SSDEEP TLSH
ZapretGUI.exe
- IMPHASH c07891137fc37a2f3f4c62b655a84736
- SHA256 9a01a6a7ae0478940ae31189148c68a12de79fefe49be43da1fb39ad92534a52
- MD5 1871fe9e045edcd5ab97be1b4ea52099
- SHA1 b259f43dda2ed1299f4f689536c0459f9a23d454
- SHA512 7127ca8c6cf9b4ef66d9e99700f35ba3914db57cf556f8583a44e43f55d4f04b7b62f3df4197d5521b93abbf5b2c98bd1b8e631c271444b5d31f12e6cf9321df
- SSDEEP 12288:oYwswg5B3lk0oFDw9kaLdg9DPWQkXWsiTHO9oQv7r118rh8X8aq5j00U88CP3mcE:oqE1jsFpT8vS8f0GG+oy28f
- TLSH T16BF47D13B560C2F4D4BDC238A747D4919E61B8CE0634B8BF17E60A202DDEB794F6A61D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
243648
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
user32
AdjustWindowRectExForDpi
BeginPaint
CallWindowProcW
CloseClipboard
CreateWindowExW
DefWindowProcW
DestroyWindow
DispatchMessageW
DrawTextW
EmptyClipboard
EnableWindow
EndPaint
FillRect
FindWindowW
GetClientRect
GetDlgCtrlID
GetDpiForSystem
GetDpiForWindow
GetMessageW
GetPropW
GetWindowLongPtrW
GetWindowTextLengthW
GetWindowTextW
InvalidateRect
IsDialogMessageW
IsWindowEnabled
IsWindowVisible
KillTimer
LoadCursorW
LoadIconW
MessageBoxW
MoveWindow
OpenClipboard
PostMessageW
PostQuitMessage
RedrawWindow
RegisterClassExW
RemovePropW
SendMessageW
SetClipboardData
SetCursor
SetForegroundWindow
SetProcessDpiAwarenessContext
SetPropW
SetTimer
SetWindowLongPtrW
SetWindowPos
SetWindowTextW
ShowWindow
TrackMouseEvent
TranslateMessage
UpdateWindow
gdi32
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontW
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
RoundRect
SelectObject
SetBkColor
SetBkMode
SetTextColor
comctl32
InitCommonControlsEx
uxtheme
SetWindowTheme
ole32
CoCreateInstance
CoInitializeEx
CoTaskMemFree
CoUninitialize
shell32
CommandLineToArgvW
SHGetKnownFolderPath
ShellExecuteExW
ShellExecuteW
winhttp
WinHttpCloseHandle
WinHttpConnect
WinHttpCrackUrl
WinHttpOpen
WinHttpOpenRequest
WinHttpQueryDataAvailable
WinHttpQueryHeaders
WinHttpReadData
WinHttpReceiveResponse
WinHttpSendRequest
WinHttpSetTimeouts
bcrypt
BCryptCloseAlgorithmProvider
BCryptCreateHash
BCryptDestroyHash
BCryptFinishHash
BCryptGenRandom
BCryptHashData
BCryptOpenAlgorithmProvider
advapi32
ChangeServiceConfigW
CloseServiceHandle
ControlService
ConvertStringSecurityDescriptorToSecurityDescriptorW
CreateServiceW
DeleteService
GetSecurityDescriptorDacl
OpenSCManagerW
OpenServiceW
QueryServiceConfigW
QueryServiceStatus
QueryServiceStatusEx
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
SetNamedSecurityInfoW
StartServiceW
api-ms-win-crt-convert-l1-1-0
_strtod_l
_strtoi64_l
_strtoui64_l
mbrtowc
mbsrtowcs
strtod
strtof
strtol
strtoll
strtoul
strtoull
wcrtomb
wcrtomb_s
wcstod
wcstol
wcstoul
api-ms-win-crt-environment-l1-1-0
__p__wenviron
_wgetenv
api-ms-win-crt-heap-l1-1-0
_aligned_free
_aligned_malloc
_set_new_mode
calloc
free
malloc
realloc
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
___mb_cur_max_func
__pctype_func
_configthreadlocale
_create_locale
_free_locale
localeconv
setlocale
api-ms-win-crt-private-l1-1-0
__C_specific_handler
memchr
api-ms-win-crt-runtime-l1-1-0
__p___argc
__p___wargv
__p__wcmdln
__sys_nerr
_beginthreadex
_cexit
_configure_wide_argv
_crt_atexit
_errno
_exit
_initialize_wide_environment
_initterm
_initterm_e
_set_app_type
_set_invalid_parameter_handler
abort
exit
signal
strerror_s
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__p__fmode
__stdio_common_vfprintf
__stdio_common_vsprintf
__stdio_common_vsscanf
__stdio_common_vswprintf
_close
_fseeki64
_ftelli64
_get_osfhandle
_wfopen
_wopen
fclose
fflush
fputc
fread
fseek
fwrite
setbuf
api-ms-win-crt-string-l1-1-0
_isctype_l
_iswalpha_l
_iswcntrl_l
_iswdigit_l
_iswlower_l
_iswprint_l
_iswpunct_l
_iswspace_l
_iswupper_l
_iswxdigit_l
_strcoll_l
_strdup
_strxfrm_l
_tolower_l
_toupper_l
_towlower_l
_towupper_l
_wcscoll_l
_wcsxfrm_l
isalnum
iswctype
mbrlen
strcmp
strlen
strncmp
tolower
toupper
wcscmp
wcscpy
wcslen
wcsncmp
kernel32
AcquireSRWLockExclusive
AreFileApisANSI
CloseHandle
CopyFileW
CreateDirectoryW
CreateFileW
CreateHardLinkW
CreateProcessW
CreateSymbolicLinkW
DeleteCriticalSection
DeviceIoControl
EnterCriticalSection
FindClose
FindFirstFileW
FindNextFileW
FlsAlloc
FlsGetValue
FlsSetValue
FormatMessageA
GetCommandLineW
GetCurrentDirectoryW
GetCurrentProcessId
GetCurrentThreadId
GetDiskFreeSpaceExW
GetExitCodeProcess
GetFileAttributesW
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFinalPathNameByHandleW
GetLastError
GetModuleFileNameW
GetProcessTimes
GetStartupInfoW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimePreciseAsFileTime
GetTempPathW
GetThreadId
GetTickCount64
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
InitOnceExecuteOnce
InitializeCriticalSection
LeaveCriticalSection
LocalFree
MoveFileExW
MulDiv
MultiByteToWideChar
OpenProcess
QueryPerformanceCounter
QueryPerformanceFrequency
RaiseException
ReleaseSRWLockExclusive
RtlCaptureContext
RtlLookupFunctionEntry
RtlRestoreContext
RtlUnwindEx
RtlVirtualUnwind
SetCurrentDirectoryW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
SetLastError
SetUnhandledExceptionFilter
Sleep
SleepConditionVariableSRW
SwitchToThread
TerminateProcess
TlsGetValue
TryAcquireSRWLockExclusive
TryEnterCriticalSection
VirtualProtect
VirtualQuery
WaitForSingleObject
WaitForSingleObjectEx
WakeAllConditionVariable
WakeConditionVariable
WideCharToMultiByte
api-ms-win-crt-math-l1-1-0
__setusermatherr
_fdopen
api-ms-win-crt-time-l1-1-0
_strftime_l
api-ms-win-crt-multibyte-l1-1-0
_mbtowc_l
Name
.text
Size
545KB
Virtual Size
544KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
178KB
Virtual Size
178KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.buildid
Size
512B
Virtual Size
28B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
1024B
Virtual Size
7KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
31KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
512B
Virtual Size
32B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ