General

  • Target
    tuxlerVPNSetup.exe
  • Size 27.7MB
  • Sample240404-vrkgssdc6y
  • SHA256 7f1dd585a3e81da686670af1358d92e9532e1b17ef6ccc1fcc91966ff9ded72a
  • MD5 SHA1 SHA512 SSDEEP
Score
1/10

Malware Config

Signatures

File Explorer

  • tuxlerVPNSetup.exe
    .exe 27.7MB

tuxlerVPNSetup.exe

  • SHA256 7f1dd585a3e81da686670af1358d92e9532e1b17ef6ccc1fcc91966ff9ded72a
  • MD5 SHA1 SHA512 SSDEEP
Digest
d8:01:88:2f:05:5f:41:2f:5e:7c:25:89:28:6a:05:c9:89:4a:7e:7d
Digest Algorithm
sha1
PE Digests Matches
Trusted
Signing Certificate
SERIALNUMBER=5931368,CN=TUXLER PRIVACY TECHNOLOGIES\, INC.,O=TUXLER PRIVACY TECHNOLOGIES\, INC.,STREET=500 Ygnacio Valley Rd Ste 410,L=Walnut Creek,ST=California,C=US,1.2.840.113549.1.9.1=#0c116f6666696365407475786c65722e636f6d,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e
Minor OS version
0
Major OS version
1
Entry point
43672
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI
PDB paths