General

  • Target

    StarVPN-FR1-x64-latest.exe

  • Size

    67.4MB

  • MD5

    e32e41f43336f6482a7169f757835e18

  • SHA1

    d531987df3dc3aa38ebe1aeebd622e3ba879e190

  • SHA256

    b018a82f87820638783ed4b5201a70d34e09758fb092dd791641931d55d023e6

  • SHA512

    a05da0392cb742382c2bba7ee3635efbb3754a60b9dcc3381b892834bdf637237c7ce542e6ef5470e2c6b1481741a0a54b7f2331725777347f392ca4bf60e8a8

  • SSDEEP

    1572864:x2513yfYHlkNeGEZ8sQcTe/FEd67As/ph6/WaOjZhAD88qy:xW1QYHqMDQcTeOd60shqfOlWKy

Score
3/10

Malware Config

Signatures

  • Unsigned PE 20 IoCs

    Checks for missing Authenticode signature.

Files

  • StarVPN-FR1-x64-latest.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/app-64.7z
    .7z
  • LICENSE.electron.txt
  • LICENSES.chromium.html
  • StarVPN.exe
    .exe windows:5 windows x64 arch:x64

    9f9c967fe6d2c8482cb4e000bbd84034


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • chrome_100_percent.pak
  • chrome_200_percent.pak
  • d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    dc71769f237c0a3ba38879380c54a4e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • icudtl.dat
  • libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    b3384e5182b61c941805b07b7dc28efe


    Headers

    Imports

    Exports

    Sections

  • locales/en-US.pak
  • resources.pak
  • resources/StarVPNService.cmd
  • resources/app.asar
    .js
  • resources/elevate.exe
    .exe windows:6 windows x86 arch:x86

    c3afe98a750f2d4f1ed5d2ac323cb5e0


    Code Sign

    Headers

    Imports

    Sections

  • resources/openvpn/x64/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    ad6e88075dd8f378032e826b93c95e63


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/openvpn/x64/libpkcs11-helper-1.dll
    .dll windows:6 windows x64 arch:x64

    bfdbd4e55892516f0902c34a2b4edfdf


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/openvpn/x64/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b93d685e15bd45941b1be7fa5aa12262


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/openvpn/x64/openvpn.exe
    .exe windows:6 windows x64 arch:x64

    8b6a0b3ff935ccefad7a10c5a72756e9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/openvpn/x64/tctl.exe
    .exe windows:6 windows x64 arch:x64

    b564f78fa1b7e9f82fd1f392bd70fba8


    Code Sign

    Headers

    Imports

    Sections

  • resources/openvpn/x64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • resources/shadowsocks/x64/sslocal.exe
    .exe windows:6 windows x64 arch:x64

    f2f2c4579ef93136d350a6941cdd589a


    Code Sign

    Headers

    Imports

    Sections

  • resources/wireguard/fastlist.exe
    .exe windows:6 windows x86 arch:x86

    01d2584d03812cc55deb096232def5b0


    Code Sign

    Headers

    Imports

    Sections

  • resources/wireguard/x64/wg.exe
    .exe windows:6 windows x64 arch:x64

    5da3d3e0ee2474ebccecb60c5860167e


    Code Sign

    Headers

    Imports

    Sections

  • resources/wireguard/x64/wireguard.exe
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Code Sign

    Headers

    Imports

    Sections

  • resources/wireguard/x64/wntn.msi
    .msi
  • snapshot_blob.bin
  • v8_context_snapshot.bin
  • vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • vk_swiftshader_icd.json
  • vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsis7z.dll
    .dll windows:6 windows x86 arch:x86

    2656ea25cde98f31a490513c2db04ae8


    Headers

    Imports

    Exports

    Sections

  • $R0/$0
  • $R0/Uninstall StarVPN.exe
    .exe windows:4 windows x86 arch:x86

    b34f154ec913d2d2c435cbd644e91687


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/StdUtils.dll
    .dll windows:5 windows x86 arch:x86

    7b79709c0d5576549eb261e3410f95f8


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UAC.dll
    .dll windows:4 windows x86 arch:x86

    0ef725341a4aecf8398c0e2132f38049


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/WinShell.dll
    .dll windows:4 windows x86 arch:x86

    a75c904bad153f5af2c37cfdf66eba5c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    d31c5eb927119d00232e4d4b0e32fcdb


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/nsProcess.dll
    .dll windows:5 windows x86 arch:x86

    439074d1c01f7b16781bdf060930814a


    Headers

    Imports

    Exports

    Sections