General

  • Target

    NordVPN Premium 7.2.0 Full Version.zip

  • Size

    10.5MB

  • MD5

    6376c394b909fc79e82cd8b1bbbdbea5

  • SHA1

    70dfb4e675b9958cd782087ba0932445938dd377

  • SHA256

    c19a446466f794b7916015e94d63b2566fdb1d94ff0bb1a30bbeb5fe3ceb1b38

  • SHA512

    74ac6170a5beaee3d6692798358831322f1bf252a90a9c01b7ed6ec0987a59f4863d95eee2300dec757e39b5e1be36e51cd8ebb4750e47a781293866208527d2

  • SSDEEP

    196608:60HLI4l71dksQ0V21Oggc4FcQPw5TTmYfoK0bfSoQvhO7Jv:60rzdu0kR4/2XjobbE8Jv

Score
7/10
upx

Malware Config

Signatures

  • ACProtect 1.3x - 1.4x DLL software 1 IoCs

    Detects file using ACProtect software.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 11 IoCs

    Checks for missing Authenticode signature.

Files

  • NordVPN Premium 7.2.0 Full Version.zip
    .zip

    Password: 8990

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/HwidProtector.dll
    .dll windows:5 windows x64 arch:x64

    Password: 8990

    c8820c92458429ac52b291ca51bad0e4


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/InstallerTool[Automatic].exe
    .exe windows:6 windows x86 arch:x86

    Password: 8990

    5a498eee87e4d89512a84502f500181f


    Code Sign

    Headers

    Imports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/Qt5Gui.dll
    .dll windows:6 windows x86 arch:x86

    Password: 8990

    8f734ad2a2d1a7b5910aa87f16fd104e


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/Security.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8990

    140ea1a2783378133a762a7bc41e492d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/borlndmm.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8990

    7028057a1895f8e9d0c743af27770b1a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/cc32100mt.dll
    .dll windows:4 windows x86 arch:x86

    Password: 8990

    8c6b03eae8fd279390ca970d47f5e142


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/data/project.xml
    .xml
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/data/remote_settings.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dbghelp.dll
    .dll windows:7 windows x86 arch:x86

    Password: 8990

    f7cb4432172d116632abc77471a1a600


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_AnalyzeGesturesInOne.dll
    .dll windows:5 windows x86 arch:x86

    Password: 8990

    7dc521fdabc278f371540c2fd723a948


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_AnalyzeGesturesInRight.dll
    .dll windows:5 windows x86 arch:x86

    2d9370562b6ab3e2b6881a774892f4c2


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_MouseDeviceManager.dll
    .dll windows:5 windows x86 arch:x86

    6a91f4ed460a4f779e47fa3db6c64262


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_MouseEventHook.dll
    .dll windows:5 windows x86 arch:x86

    d39e9134c0d38d3973c0cf541b1a8205


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_PenSuit.dll
    .dll windows:5 windows x86 arch:x86

    b811bd8795ae9a77c1200c0893c4745e


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_ScrollbarControl.dll
    .dll windows:5 windows x86 arch:x86

    3e3324466588adeb83c29151b618292a


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_Wheel4D.dll
    .dll windows:5 windows x86 arch:x86

    3ed6cd313e40e1d8c338908b2957d016


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/DLL_ZoomControl.dll
    .dll windows:5 windows x86 arch:x86

    c773a676b47095405247bb8598daa453


    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/dll/Wheel4D.xml
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/iconengines/qsvgicon.dll
    .dll windows:6 windows x86 arch:x86

    d80f8733bbbe0d549bd8643260d81557


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ini/Custom.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ini/DefaultScript.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ini/FunctionDefine.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ini/Inform.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ini/Internet.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ini/Main.ini
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/libEGL.dll
    .dll windows:6 windows x86 arch:x86

    48c72c12b3685003a84e2caf235b2330


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/newsocket.data
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/MSWINSCK.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    fcc40667ac22e0c598518006de958259


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/RICHTX32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aaca01ab2cd35af160b8025e9dcfad9f


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/TABCTL32.OCX
    .dll regsvr32 windows:4 windows x86 arch:x86

    aa8b0ec5b7d56e08d6614ae243221096


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/TabS.oca
    .dll windows:4 windows x86 arch:x86


    Headers

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/TabS.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86


    Headers

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/aero.skn
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/ocx/mscomctl.ocx
    .dll regsvr32 windows:4 windows x86 arch:x86

    ce21923007044b1701a0b2dc4ac9396b


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/opengl32sw.dll
    .dll windows:6 windows x86 arch:x86

    55466abe52f1bf0d8df45beaffd68bf3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_ca.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_cs.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_de.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_fi.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_fr.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_he.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_hu.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_it.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_ja.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_ko.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_lv.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_ru.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_sk.qm
  • NordVPN Premium 7.2.0 Full Version/InstallerTool [Automatic]/translations/qt_uk.qm
  • readme.txt