Resubmissions

09/08/2023, 19:01

230809-xplceseh5510

07/05/2023, 09:23

230507-lck1caeb3210

General

  • Target
    vpn.exe
  • Size 3.0MB
  • Sample230809-xplceseh55
  • SHA256 a1dc10eaa3d8eb09dfcb58123a48484639301d86165a8e3c76747cc04a2bf67d
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • vpn.exe
    .exe 3.0MB

vpn.exe

  • IMPHASH 79b3362178937bf9559741c46bb9e035
  • SHA256 a1dc10eaa3d8eb09dfcb58123a48484639301d86165a8e3c76747cc04a2bf67d
  • MD5 SHA1 SHA512 SSDEEP

PE Signature issue

Digest
6a:e5:08:a5:a5:37:87:15:bc:91:b3:c9:43:5d:76:83:05:84:a3:60:c1:dc:51:1b:c6:90:b9:fb:8a:a8:08:57
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=ESTsoft Corp.,O=ESTsoft Corp.,L=Seogho-cu,ST=Seoul,C=KR

PE Signature issue

Digest
57:19:8a:0e:0c:15:6e:34:48:28:65:ce:20:09:63:09:22:8c:33:04
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
CN=ESTsoft Corp.,O=ESTsoft Corp.,L=Seogho-cu,ST=Seoul,C=KR
Minor OS version
Major OS version
Entry point
8515697
Magic Number
267
Subsystem
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED
PDB paths