VPNremoteFor46xxSetup[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

VPNremoteFor46xxSetup.exe
Size

604KB
MD5

b5d270801a116fef139c98178040945c
SHA1

256a53a4c61d70af6ec3e40e5a7161a5c32abfbd
SHA256

ab085a1c7482f74e13f16b1a56af8484ee3f9dca0b3e2cf8d3d7045da6d94a62
SHA512

7bcbceaca7e75757437f7dd6ba74024f7ee9b44fa8ca560a06bb5f5d501221e5cd86d0523bd6514053dad9ad8138972ef1e60e9985d0763e669f318f94ce2c54
SSDEEP

3072:/9UgbQEHmfnwrRONB5Gh7F2pfS2EvRwsBq1z09KUvVsECy1l3KJ9QEUcA6Rqyxg/:l2EqwrRqChFeQjqZgONJiPS8yxmf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
VPNremoteFor46xxSetup.exe

Files

VPNremoteFor46xxSetup.exe
.exe windows x86

15f4675e7a86e1c96b01cff4b01bb5e3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

iphlpapi

DeleteIPAddress
GetIfTable
AddIPAddress
GetIpAddrTable

kernel32

HeapAlloc
HeapFree
GetDriveTypeA
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
TerminateProcess
HeapReAlloc
HeapSize
GetACP
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
SetHandleCount
GetStdHandle
GetFileType
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
RtlUnwind
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
lstrcatA
lstrcpynA
lstrlenA
CloseHandle
GetFileSize
CreateFileA
lstrcmpA
lstrcpyA
Sleep
GetLastError
CreateThread
WaitForSingleObject
OutputDebugStringA
GetLocalTime
CopyFileA
GetModuleFileNameA
LoadResource
FindResourceA
LockResource
GlobalFree
GlobalUnlock
GlobalLock
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GetProcAddress
GetModuleHandleA
MulDiv
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GetSystemTime
GetTimeZoneInformation
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
SetErrorMode
GetFileTime
GetFileAttributesA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
SetEndOfFile
lstrcmpiA
GetProfileStringA
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
GlobalGetAtomNameA
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
SizeofResource
GlobalFlags
GetProcessVersion
GlobalAlloc
GetCurrentThread
FormatMessageA
LocalFree
LoadLibraryA
FreeLibrary
GetVersion
GetCurrentThreadId

user32

SetRect
GetNextDlgGroupItem
MessageBeep
CharUpperA
InvalidateRect
RegisterClipboardFormatA
PostThreadMessageA
InflateRect
GetDesktopWindow
PtInRect
GetClassNameA
GetSysColorBrush
LoadCursorA
DestroyMenu
LoadStringA
MapDialogRect
SetWindowContextHelpId
GetMessageA
TranslateMessage
ValidateRect
GetCursorPos
SetCursor
PostQuitMessage
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
CopyAcceleratorTableA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
AdjustWindowRectEx
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetMenuItemCount
GetSubMenu
GetMenuItemID
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
CreateWindowExA
SetWindowsHookExA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
DefDlgProcA
IsWindowUnicode
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
CharNextA
EnableMenuItem
SetWindowPos
RegisterWindowMessageA
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
CopyRect
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
ScreenToClient
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
GetParent
GetFocus
IsWindowEnabled
IsWindow
SetFocus
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
GetSystemMenu
AppendMenuA
LoadIconA
EnableWindow
KillTimer
PostMessageA
SendMessageA
SetTimer
UnregisterClassA

gdi32

SetWindowExtEx
ScaleWindowExtEx
GetClipBox
IntersectClipRect
DeleteObject
ScaleViewportExtEx
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
PatBlt
GetObjectA
CreateBitmap
GetMapMode
DPtoLP
GetTextColor
GetBkColor
LPtoDP
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetTextColor
SetBkMode
SetBkColor
GetStockObject
SelectObject
RestoreDC
SaveDC
DeleteDC
CreateSolidBrush
GetTextExtentPointA
BitBlt
CreateCompatibleDC
CreateDIBitmap
CreateFontIndirectA

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegSetValueExA
RegCloseKey

comctl32

ImageList_Destroy
ord17

oledlg

ord8

ole32

CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard

olepro32

ord253

oleaut32

SysStringLen
SysAllocStringByteLen
SysAllocString
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString

wsock32

gethostbyname
ntohl
setsockopt
getservbyname
htonl
htons
inet_addr
gethostname
WSACleanup
WSAStartup
connect
ntohs
send
select
__WSAFDIsSet
recv
WSAGetLastError
ioctlsocket
closesocket
recvfrom
sendto
socket
bind

Sections

.text
Size: 184KB - Virtual size: 183KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 649KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 348KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

15f4675e7a86e1c96b01cff4b01bb5e3

Headers

File Characteristics

Imports

iphlpapi

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

comctl32

oledlg

ole32

olepro32

oleaut32

wsock32

Sections

.text Size: 184KB - Virtual size: 183KB

.rdata Size: 44KB - Virtual size: 40KB

.data Size: 24KB - Virtual size: 649KB

.rsrc Size: 348KB - Virtual size: 344KB

.text
Size: 184KB - Virtual size: 183KB

.rdata
Size: 44KB - Virtual size: 40KB

.data
Size: 24KB - Virtual size: 649KB

.rsrc
Size: 348KB - Virtual size: 344KB