Static task
static1
Behavioral task
behavioral1
Sample
OpenVPNClient.exe
Resource
win10v2004-20230220-en
General
-
Target
OpenVPNClient.exe
-
Size
344KB
-
MD5
87a44bf910e942a77e96759bd9d384fb
-
SHA1
7be73caa1a4b2113c8bf96a3956ef2d8d0af0f3c
-
SHA256
e148b61b55637c0c94e9bdcb10f85926d16a4606b00c749ff5c5512cefbf7eb1
-
SHA512
86ec6516d5906d3cf068c8e390330fc7ff495e794a1364b90277564865b753a043892322cda3ad8ef79faaa842574783f26f81b6a8cd9c373ef11090bcff159e
-
SSDEEP
6144:gf5Ii/Vt+6FkM+Wxl9jZMz/y1rekkCkVg+AW93zEPCNNd59i/kt+mFkMh:gxIi/Vt+6FkM+mXC/FkdkVg9WlzqQ19H
Malware Config
Signatures
Files
-
OpenVPNClient.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 287KB - Virtual size: 287KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ