General

  • Target

    bVPN_1_7_0_setup.exe

  • Size

    7.3MB

  • MD5

    2fa4cdaa23793a7db146ff2cc2f8b733

  • SHA1

    0f5db4c08a276c60dd689dd4b5837ecc66da1f10

  • SHA256

    5bb2af4f0e70623e1ce277a4cd0c0c27e51890541e34f0e9a1e5b81ce4a12324

  • SHA512

    dcda14c2464af765037e2803df5ee91ed9131ed262f28f49c051ebb9aef602ac95a3c6c3a8a6fd022c652dc5da7a7ba5edff96fed23c43cac1334878f3125be8

  • SSDEEP

    196608:WbiyFb1OkjwyTuN+d+aoxtqL8PlZT9/Yr254XQhd:4Fb179a8dpPLuZTRG2EId

Score
3/10

Malware Config

Signatures

  • Unsigned PE 25 IoCs

    Checks for missing Authenticode signature.

Files

  • bVPN_1_7_0_setup.exe
    .exe windows:5 windows x86 arch:x86

    be41bf7b8cc010b614bd36bbca606973


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/FindProcDLL.dll
    .dll windows:4 windows x86 arch:x86

    e26d7460d0c04056b9226a899477ba4d


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/GetVersion.dll
    .dll windows:5 windows x86 arch:x86

    85ad8452fce328be66b53876c554feac


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/LangDLL.dll
    .dll windows:5 windows x86 arch:x86

    e981c0ab92cb1f191bb5e23392e14796


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:5 windows x86 arch:x86

    039bcbc605477e8e87ec550c2e60e748


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:5 windows x86 arch:x86

    9ea5bdc8c90dfcffe309465c26c89758


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:5 windows x86 arch:x86

    8700d0ebbb41c81ea52718af1ab70a93


    Headers

    Imports

    Exports

    Sections

  • QtCore4.dll
    .dll windows:5 windows x86 arch:x86

    6358e610c91c9433aa9e2a812ffb94cd


    Headers

    Imports

    Exports

    Sections

  • QtGui4.dll
    .dll windows:5 windows x86 arch:x86

    ec5489b8fd9af87986a9c9a316dab3b3


    Headers

    Imports

    Exports

    Sections

  • QtNetwork4.dll
    .dll windows:5 windows x86 arch:x86

    74c08a4194667f6084988f23b26e41e1


    Headers

    Imports

    Exports

    Sections

  • bvpn.exe
    .exe windows:5 windows x86 arch:x86

    89f90021eea4f0c6cf9d4e73f5722c0d


    Code Sign

    Headers

    Imports

    Sections

  • debug_helper.exe
    .exe windows:5 windows x86 arch:x86

    36588b59751326eeaf0a3f67e75b5d13


    Code Sign

    Headers

    Imports

    Sections

  • iwasel_pro_updater.exe
    .exe windows:5 windows x86 arch:x86

    f51a9105bdf05f0e95d8316ef4431ae3


    Code Sign

    Headers

    Imports

    Sections

  • libeay32.dll
    .dll windows:5 windows x86 arch:x86

    a1148764d1a362f64de08140ce887a04


    Headers

    Imports

    Exports

    Sections

  • license.TXT
  • msvcp100.dll
    .dll windows:5 windows x86 arch:x86

    7a0d9f66efd1839f136ca6896fa52dfa


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • msvcr100.dll
    .dll windows:5 windows x86 arch:x86

    5271d5ce8b44dd47bc92563e27585466


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • openvpn/libeay32.dll
    .dll windows:5 windows x86 arch:x86

    cedb8fd4786e36d1178cf6355767ca44


    Headers

    Imports

    Exports

    Sections

  • openvpn/libpkcs11-helper-1.dll
    .dll windows:5 windows x86 arch:x86

    1396809fdcbdf2ee5f1aeb3df2c557b7


    Headers

    Imports

    Exports

    Sections

  • openvpn/libssl32.dll
    .dll windows:4 windows x86 arch:x86

    3aad8fe8832c72ceebc03f66dca7d528


    Headers

    Imports

    Exports

    Sections

  • openvpn/lzo2.dll
    .dll windows:5 windows x86 arch:x86

    80b72de7ea8a06495848875f2a1ceb19


    Headers

    Imports

    Exports

    Sections

  • openvpn/msvcr90.dll
    .dll windows:5 windows x86 arch:x86

    0fda4497453286b1daa098623dfc53ce


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • openvpn/openvpn.exe
    .exe windows:5 windows x86 arch:x86

    0c518061136f6b317f312a4af3e38351


    Headers

    Imports

    Sections

  • openvpn/ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    b89564278cf38bdcaea58f719b9f8cd5


    Headers

    Imports

    Exports

    Sections

  • openvpn/tap/win32/OemWin2k.inf
  • openvpn/tap/win32/tap0901.cat
  • openvpn/tap/win32/tap0901.sys
    .sys windows:6 windows x86 arch:x86

    7bc0e747b3ccfdebdacc897735028b04


    Headers

    Imports

    Sections

  • openvpn/tap/win32/tapinstall.exe
    .exe windows:6 windows x86 arch:x86

    06694565e94cd10f48e1e4b90bc04bc2


    Headers

    Imports

    Sections

  • openvpn/tap/win64/OemWin2k.inf
  • openvpn/tap/win64/tap0901.cat
  • openvpn/tap/win64/tap0901.sys
    .sys windows:6 windows x64 arch:x64

    741e65dbed0bdb03af558a33e0336da1


    Headers

    Imports

    Sections

  • openvpn/tap/win64/tapinstall.exe
    .exe windows:6 windows x64 arch:x64

    ce4a5cfcfb0452b87e013f07f4d59f9c


    Headers

    Imports

    Sections

  • plugins/imageformats/qico4.dll
    .dll windows:5 windows x86 arch:x86

    234648628dd4c8af896510b5a1ee61eb


    Headers

    Imports

    Exports

    Sections

  • qjson0.dll
    .dll windows:5 windows x86 arch:x86

    21f4aed1d83d23c385ab408af6c2c941


    Headers

    Imports

    Exports

    Sections

  • qssh2.dll
    .dll windows:5 windows x86 arch:x86

    b231177f3cea4661423e6bbdd931c257


    Headers

    Imports

    Exports

    Sections

  • quazip.dll
    .dll windows:5 windows x86 arch:x86

    a3fe321d424bd04e2c787ba162ec0487


    Headers

    Imports

    Exports

    Sections

  • ssleay32.dll
    .dll windows:5 windows x86 arch:x86

    1d56cd8743f80652f39ffaafbb90e889


    Headers

    Imports

    Exports

    Sections

  • uninst.exe.nsis