General

  • Target

    IVPN-Client-v3.14.14.exe

  • Size

    90.1MB

  • MD5

    58f4f92aea03b8debd946f6d96d3ffc1

  • SHA1

    1bdbab4bdcf6c0ceec1a66650ee0b3975066e895

  • SHA256

    2dd2511facb200b644dae3946305c801a0a5c00eb971a7df0f1f1157457d9aba

  • SHA512

    9dd9fc64e3d3a87f39130a553f7de88ed8bcff11a591e68f5a1a624aafdce784cee547a8d50c16f4920bfe0bdf2e73b726fbee78b2fab3c05149ef13e09bc067

  • SSDEEP

    1572864:9GpP19CdJSCU9nwwYhFQkPhX52IfA2C4iAZoQk/FlNPmBVym7EnutZ+5vugg/iQL:9G5CdJSCe4xpnAfbAzAFvPmBVt9E52Dp

Score
3/10

Malware Config

Signatures

  • Unsigned PE 15 IoCs

    Checks for missing Authenticode signature.

Files

  • IVPN-Client-v3.14.14.exe
    .exe windows:4 windows x86 arch:x86

    56a78d55f3f7af51443e58e0ce2fb5f6


    Code Sign

    Headers

    Imports

    Sections

  • $PLUGINSDIR/InstallOptions.dll
    .dll windows:4 windows x86 arch:x86

    4b45b7e00344a87332fbd12653854d1a


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/ioSpecial.ini
  • $PLUGINSDIR/modern-header.bmp
  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsExec.dll
    .dll windows:4 windows x86 arch:x86

    c1c7505e1e6e929ebb6b9100e55b050a


    Headers

    Imports

    Exports

    Sections

  • IVPN Firewall Native x64.dll
    .dll windows:6 windows x64 arch:x64

    544dff04837acd4eefec14091ba6f639


    Headers

    Imports

    Exports

    Sections

  • IVPN Helpers Native x64.dll
    .dll windows:6 windows x64 arch:x64

    f8286fbc5a90a318fc3cdd2fcd7af3ee


    Headers

    Imports

    Exports

    Sections

  • IVPN Service.exe
    .exe windows:6 windows x64 arch:x64

    2070227a978f0d2fc3c7167706db335a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OpenVPN/obfsproxy/obfs4proxy.exe
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Code Sign

    Headers

    Imports

    Sections

  • OpenVPN/x86_64/libcrypto-1_1-x64.dll
    .dll windows:4 windows x64 arch:x64

    314f298455073f7399d9403f3b885766


    Headers

    Imports

    Exports

    Sections

  • OpenVPN/x86_64/libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • OpenVPN/x86_64/libpkcs11-helper-1.dll
    .dll windows:6 windows x64 arch:x64

    bfdbd4e55892516f0902c34a2b4edfdf


    Headers

    Imports

    Exports

    Sections

  • OpenVPN/x86_64/libssl-1_1-x64.dll
    .dll windows:4 windows x64 arch:x64

    1c5eb356323f3afee44b0f67c3f75f0f


    Headers

    Imports

    Exports

    Sections

  • OpenVPN/x86_64/libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    2b512dd3642ba3619025f2fc713dea1c


    Headers

    Imports

    Exports

    Sections

  • OpenVPN/x86_64/openssl.exe
    .exe windows:4 windows x64 arch:x64

    3813fa343832ec446f2d8478627ec79b


    Code Sign

    Headers

    Imports

    Sections

  • OpenVPN/x86_64/openvpn.exe
    .exe windows:6 windows x64 arch:x64

    09a75806636ba0c8221227a66b2cdea9


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • OpenVPN/x86_64/tap/OemVista.inf
  • OpenVPN/x86_64/tap/license.txt
  • OpenVPN/x86_64/tap/tapivpn.cat
  • OpenVPN/x86_64/tap/tapivpn.sys
    .sys windows:6 windows x64 arch:x64

    a13cebc938af36dab20cc614c6fb7e94


    Code Sign

    Headers

    Imports

    Sections

  • OpenVPN/x86_64/vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    7f07fd94e5bb907093556781cc464017


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • SplitTunnelDriver/x86_64/ivpn-split-tunnel.sys
    .sys windows:10 windows x64 arch:x64

    a2af86944f7ad036388bb36523009f5d


    Code Sign

    Headers

    Imports

    Sections

  • Uninstall.exe.nsis
  • WireGuard/x86_64/wg.exe
    .exe windows:6 windows x64 arch:x64

    5da3d3e0ee2474ebccecb60c5860167e


    Code Sign

    Headers

    Imports

    Sections

  • WireGuard/x86_64/wireguard.exe
    .exe windows:6 windows x64 arch:x64

    9cbefe68f395e67356e2a5d8d1b285c0


    Code Sign

    Headers

    Imports

    Sections

  • cli/ivpn.exe
    .exe windows:6 windows x64 arch:x64

    2070227a978f0d2fc3c7167706db335a


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • devcon/x86_64/devcon.exe
    .exe windows:6 windows x64 arch:x64

    ce4a5cfcfb0452b87e013f07f4d59f9c


    Code Sign

    Headers

    Imports

    Sections

  • dnscrypt-proxy/dnscrypt-proxy.exe
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Code Sign

    Headers

    Imports

    Sections

  • etc/ca.crt
  • etc/dnscrypt-proxy-template.toml
  • etc/servers.json
  • etc/ta.key
  • icon.ico
  • kem/kem-helper.exe
    .exe windows:6 windows x64 arch:x64

    66447a26d3076109eccca45347f955f7


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ui/IVPN Client.exe
    .exe windows:5 windows x64 arch:x64

    09edda3803c609000e00c632200873c3


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ui/LICENSE.electron.txt
  • ui/LICENSES.chromium.html
  • ui/chrome_100_percent.pak
  • ui/chrome_200_percent.pak
  • ui/d3dcompiler_47.dll
    .dll windows:10 windows x64 arch:x64

    8235041cfd6fffb926142c2c78013446


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • ui/ffmpeg.dll
    .dll windows:5 windows x64 arch:x64

    14338d2168d869b1b53d66354179e8c5


    Headers

    Imports

    Exports

    Sections

  • ui/icudtl.dat
  • ui/libEGL.dll
    .dll windows:5 windows x64 arch:x64

    592e6e55d4fe33d1bd84e3b3016fe3b2


    Headers

    Imports

    Exports

    Sections

  • ui/libGLESv2.dll
    .dll windows:5 windows x64 arch:x64

    7e67cb770e0040254310165a1b309202


    Headers

    Imports

    Exports

    Sections

  • ui/locales/en-US.pak
  • ui/resources.pak
  • ui/resources/app.asar
  • ui/resources/public.pem
  • ui/snapshot_blob.bin
  • ui/v8_context_snapshot.bin
  • ui/vk_swiftshader.dll
    .dll windows:5 windows x64 arch:x64

    c6d5499631d983c25f3393a4b4b13399


    Headers

    Imports

    Exports

    Sections

  • ui/vk_swiftshader_icd.json
  • ui/vulkan-1.dll
    .dll windows:5 windows x64 arch:x64

    49ed29c3ff417b26c7cd92ecc9b7dcb3


    Headers

    Imports

    Exports

    Sections

  • v2ray/v2ray.exe
    .exe windows:6 windows x64 arch:x64

    ea509d361799935a94335b88f534a970


    Code Sign

    Headers

    Imports

    Sections