General

  • Target

    openconnect-gui-1.6.1-win64.exe

  • Size

    14.8MB

  • MD5

    56d4110c3aa47ba86ea4698d7a82fa85

  • SHA1

    ee3b3528b144cb887fcb4ab3eb7bec657d3b84cc

  • SHA256

    c02a1a7f566d6d6d26f3f244192bb2bff87ff4f3cb73ec155269b21e9ea70f54

  • SHA512

    8bd369be0f5f4ab4c7e64e2204ae5162beb86ad9ab7fc2752d67429170a18e4be77a8f36667ff229bc6a444b2bf005bf6596708dea4dc2b75df2bdd1fc2e6bd0

  • SSDEEP

    393216:SUwhDuTK7pM+loBjdAjsaSaPyf2+CRKJH4V60blszrtn0chbaNO:SUwhDu8jlocjje+3YJYg0blsf1EO

Score
3/10

Malware Config

Signatures

  • Unsigned PE 33 IoCs

    Checks for missing Authenticode signature.

Files

  • openconnect-gui-1.6.1-win64.exe
    .exe windows:4 windows x64 arch:x64

    c0f430a142bcdc701f4a3bdc3d2c6a84


    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x64 arch:x64

    05819310b75421aa191b541c88aafa6f


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/NSIS.InstallOptions.ini
  • $PLUGINSDIR/StartMenu.dll
    .dll windows:4 windows x64 arch:x64

    511c5f608df90f14ce6f4dd457c4ff2a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x64 arch:x64

    cf8eee620b3371ff06e99c34f39ea84c


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x64 arch:x64

    6999456a03b632cf650f212358b1c70e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • LICENSE.txt
  • Qt6Core.dll
    .dll windows:4 windows x64 arch:x64

    eadf15de9fff87c70579d7819406bde6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Gui.dll
    .dll windows:4 windows x64 arch:x64

    e2190651aa3ca75299985e28891ae390


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Network.dll
    .dll windows:4 windows x64 arch:x64

    86e4966d01c4889e909a9a4002518007


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6StateMachine.dll
    .dll windows:4 windows x64 arch:x64

    56a23fa71859ca493dca545f4f3b6e4c


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Qt6Widgets.dll
    .dll windows:4 windows x64 arch:x64

    cf7c8d396d6bbcddac02a4710683ce77


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x64 arch:x64

    c0f430a142bcdc701f4a3bdc3d2c6a84


    Headers

    Imports

    Sections

  • $PLUGINSDIR/UserInfo.dll
    .dll windows:4 windows x64 arch:x64

    6999456a03b632cf650f212358b1c70e


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-header.bmp
  • libbrotlicommon.dll
    .dll .js windows:4 windows x64 arch:x64 polyglot

    ccb34e02e5bd568f952db5cabbf3e2a1


    Headers

    Imports

    Exports

    Sections

  • libbrotlidec.dll
    .dll windows:4 windows x64 arch:x64

    646984f614b7145be46e983790f786d5


    Headers

    Imports

    Exports

    Sections

  • libbrotlienc.dll
    .dll windows:4 windows x64 arch:x64

    f5b9b1ca375e8ed2bb864ac249774571


    Headers

    Imports

    Exports

    Sections

  • libffi-8.dll
    .dll windows:4 windows x64 arch:x64

    aa74fefb572e93c9b1dbf45714159546


    Headers

    Imports

    Exports

    Sections

  • libgcc_s_seh-1.dll
    .dll windows:4 windows x64 arch:x64

    8142ee0f45e10ebbff675b18dc67c93c


    Headers

    Imports

    Exports

    Sections

  • libgmp-10.dll
    .dll windows:4 windows x64 arch:x64

    51d93a8615c3091677c777aeb4ab1120


    Headers

    Imports

    Exports

    Sections

  • libgnutls-30.dll
    .dll windows:4 windows x64 arch:x64

    8feaf7f302b0b994525dd9e75e43b3a3


    Headers

    Imports

    Exports

    Sections

  • libhogweed-6.dll
    .dll windows:4 windows x64 arch:x64

    449859eec6a3739d2b4c1e1a9d07f9eb


    Headers

    Imports

    Exports

    Sections

  • libiconv-2.dll
    .dll windows:4 windows x64 arch:x64

    d1b707499a1dc5e6414f511e64677d6b


    Headers

    Imports

    Exports

    Sections

  • libidn2-0.dll
    .dll windows:4 windows x64 arch:x64

    353ef798afd1eaeb2a0dce92d190d6a9


    Headers

    Imports

    Exports

    Sections

  • libintl-8.dll
    .dll windows:4 windows x64 arch:x64

    b27b9ddbf928ae1646f6329a1abf21fd


    Headers

    Imports

    Exports

    Sections

  • liblz4.dll
    .dll windows:4 windows x64 arch:x64

    bbbd86e4d4d067baa755eb3c7ba6eb46


    Headers

    Imports

    Exports

    Sections

  • liblzma-5.dll
    .dll windows:4 windows x64 arch:x64

    a673d2ab28a3c338fc7994894ccb7f49


    Headers

    Imports

    Exports

    Sections

  • libnettle-8.dll
    .dll windows:4 windows x64 arch:x64

    ce5a21f94962688dcd576c438d8fd09f


    Headers

    Imports

    Exports

    Sections

  • libopenconnect-5.dll
    .dll windows:4 windows x64 arch:x64

    6647820d617213f41edf7f1666fe7753


    Headers

    Imports

    Exports

    Sections

  • libp11-kit-0.dll
    .dll windows:4 windows x64 arch:x64

    073cb1783e36f064d7ae470d83b44e24


    Headers

    Imports

    Exports

    Sections

  • libstdc++-6.dll
    .dll windows:4 windows x64 arch:x64

    a4cad646a5b4cb6747fd2fb039afd431


    Headers

    Imports

    Exports

    Sections

  • libstoken-1.dll
    .dll windows:4 windows x64 arch:x64

    3cfdf665691f26d9fa9d692d0280e143


    Headers

    Imports

    Exports

    Sections

  • libtasn1-6.dll
    .dll windows:4 windows x64 arch:x64

    2f8134eade2d4a40b6cc29550c3293e3


    Headers

    Imports

    Exports

    Sections

  • libunistring-5.dll
    .dll windows:4 windows x64 arch:x64

    5df5957a2375fd9826150acae6823c04


    Headers

    Imports

    Exports

    Sections

  • libwinpthread-1.dll
    .dll windows:4 windows x64 arch:x64

    d5ece460ec782e0a1d454029562a8923


    Headers

    Imports

    Exports

    Sections

  • libxml2-2.dll
    .dll windows:4 windows x64 arch:x64

    b3f41a300a686f73d2b80ab6d84d0613


    Headers

    Imports

    Exports

    Sections

  • libzstd.dll
    .dll windows:4 windows x64 arch:x64

    0b4fe40a28e44dc6639c71e7b1f11fc2


    Headers

    Imports

    Exports

    Sections

  • openconnect-gui.exe
    .exe windows:4 windows x64 arch:x64

    1b1d476324640e2e627a4437e4c6c316


    Headers

    Imports

    Sections

  • openconnect.exe
    .exe windows:4 windows x64 arch:x64

    e82812923d426835a8a9fcdbe1a3d3f6


    Headers

    Imports

    Sections

  • plugins/platforms/qwindows.dll
    .dll windows:4 windows x64 arch:x64

    bd895f7530f2d1a282efc5b411f3e8e6


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/styles/qwindowsvistastyle.dll
    .dll windows:4 windows x64 arch:x64

    d84cdbc2a1a869524517cc244720152d


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • plugins/tls/qschannelbackend.dll
    .dll windows:4 windows x64 arch:x64

    3bb7bc9fb68a6ebd6298bca70d52b7a8


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • qt.conf
  • vpnc-script-win.js
    .js
  • vpnc-script.js
    .js
  • wintun.dll
    .dll windows:6 windows x64 arch:x64

    01ce5951b7d0dcca222159a28511a055


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • zlib1.dll
    .dll windows:4 windows x64 arch:x64

    0362b276bf74944aaf0d04f3240210cd


    Headers

    Imports

    Exports

    Sections