General

  • Target

    25f0a6990048b031960dce390082d45a07ad45ac26dc57ed4d21dbfb9a76b654

  • Size

    14.7MB

  • MD5

    e878fe2e823e09d13cd2bcdad552361c

  • SHA1

    ed2ff98fc621b99dcfe7dac1feb9f850ea4f3c43

  • SHA256

    25f0a6990048b031960dce390082d45a07ad45ac26dc57ed4d21dbfb9a76b654

  • SHA512

    ebc465f8754df6a68d58bfcdae2c522aac699d72d7cd0acde8b7d963af259dd3a5ca221780613d9130d1030117082f90182907164790f4c3b28ddb58334967a0

  • SSDEEP

    393216:T+iYPlwK0M4cLLgTMPH9qhg+mf0p6GH/5mbAOgsDu1B6S:T+iYPlwdcI4Pw6GpbHBmbPgD1BF

Score
3/10

Malware Config

Signatures

  • Unsigned PE 17 IoCs

    Checks for missing Authenticode signature.

Files

  • 25f0a6990048b031960dce390082d45a07ad45ac26dc57ed4d21dbfb9a76b654
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • $PLUGINSDIR/System.dll
    .dll windows:4 windows x86 arch:x86

    fc0224e99e736751432961db63a41b76


    Headers

    Imports

    Exports

    Sections

  • $PLUGINSDIR/modern-wizard.bmp
  • $PLUGINSDIR/nsDialogs.dll
    .dll windows:4 windows x86 arch:x86

    6b5c4f7d679059f68f1269aad3a5cecd


    Headers

    Imports

    Exports

    Sections

  • Proxy/dnsconfig
  • Proxy/libcrypto-1_1.dll
    .dll windows:4 windows x86 arch:x86

    7a03d16837591aab278e5d22d51fc942


    Headers

    Imports

    Exports

    Sections

  • Proxy/libgcc_s_dw2-1.dll
    .dll windows:4 windows x86 arch:x86

    e29ace961c4c100b7f36b0d9cea59c9f


    Headers

    Imports

    Exports

    Sections

  • Proxy/libpcre-1.dll
    .dll windows:4 windows x86 arch:x86

    2c6201ddb94d92757a3a578b92a24add


    Headers

    Imports

    Exports

    Sections

  • Proxy/libssp-0.dll
    .dll windows:4 windows x86 arch:x86

    6293554d6f5748cd2449439ba5a0eb13


    Headers

    Imports

    Exports

    Sections

  • Proxy/libwinpthread-1.dll
    .dll windows:4 windows x86 arch:x86

    b45857422552f10810107eef76dc7cbf


    Headers

    Imports

    Exports

    Sections

  • Proxy/sysproxy.exe
    .exe windows:6 windows x86 arch:x86

    5f196900fae78a500f50ce95bb3b9a27


    Headers

    Imports

    Sections

  • Proxy/wintun.dll
    .dll windows:6 windows x64 arch:x64

    01ce5951b7d0dcca222159a28511a055


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • Proxy/ww-dns4warder.exe
    .exe windows:4 windows x64 arch:x64

    f259b9523ac1ae8d1508ff36c0c6e036


    Headers

    Imports

    Sections

  • Proxy/ww-ss-local.exe
    .exe windows:4 windows x86 arch:x86

    36922e57209da66c40dcc13e7e417d34


    Headers

    Imports

    Sections

  • Proxy/ww-tun2socks.exe
    .exe windows:6 windows x64 arch:x64

    f0ea7b7844bbc5bfa9bb32efdcea957c


    Headers

    Imports

    Sections

  • Uninstall.exe
    .exe windows:4 windows x86 arch:x86

    61259b55b8912888e90f516ca08dc514


    Headers

    Imports

    Sections

  • data/app.so
    .elf linux x64
  • data/flutter_assets/AssetManifest.bin
  • data/flutter_assets/AssetManifest.json
  • data/flutter_assets/FontManifest.json
  • data/flutter_assets/NOTICES.Z
    .gz
  • NOTICES.Z
  • data/flutter_assets/assets/acls/gfwlist.pac
    .js
  • data/flutter_assets/assets/images/app_icon.ico
  • data/flutter_assets/assets/images/app_icon.png
    .png
  • data/flutter_assets/assets/images/app_icon_disc.ico
  • data/flutter_assets/assets/images/app_icon_disc.png
    .png
  • data/flutter_assets/assets/images/empty.png
    .png
  • data/flutter_assets/assets/images/guide_1.svg.vec
  • data/flutter_assets/assets/images/guide_2.svg.vec
  • data/flutter_assets/assets/images/guide_3.svg.vec
  • data/flutter_assets/assets/images/hi_speed.svg.vec
  • data/flutter_assets/assets/images/hi_speed_dark.svg.vec
  • data/flutter_assets/assets/images/hi_speed_inverse.svg.vec
  • data/flutter_assets/assets/images/hi_speed_inverse_dark.svg.vec
  • data/flutter_assets/assets/images/lite.svg.vec
  • data/flutter_assets/assets/images/lite_dark.svg.vec
  • data/flutter_assets/assets/images/login_bg.png
    .png
  • data/flutter_assets/assets/images/logo.png
    .png
  • data/flutter_assets/assets/images/network.png
    .png
  • data/flutter_assets/assets/images/new_node.svg.vec
  • data/flutter_assets/assets/images/premium.svg.vec
  • data/flutter_assets/assets/images/premium_dark.svg.vec
  • data/flutter_assets/assets/images/pro.svg.vec
  • data/flutter_assets/assets/images/pro_dark.svg.vec
  • data/flutter_assets/assets/images/svip.svg.vec
  • data/flutter_assets/assets/images/vip.svg.vec
  • data/flutter_assets/assets/meta.json
  • data/flutter_assets/assets/text/protocol-private.json
  • data/flutter_assets/assets/text/protocol-service.json
  • data/flutter_assets/fonts/MaterialIcons-Regular.otf
  • data/flutter_assets/shaders/ink_sparkle.frag
  • data/icudtl.dat
  • flutter_windows.dll
    .dll windows:5 windows x64 arch:x64

    46af01a86bd2fb049906d2bc854f3552


    Headers

    Imports

    Exports

    Sections

  • msvcp140.dll
    .dll windows:6 windows x64 arch:x64

    2ba11fd5a511c8a409e705e9ab6b5dc1


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • system_tray_plugin.dll
    .dll windows:6 windows x64 arch:x64

    7a6aa452cc12938f56e28ae0bf5f1670


    Headers

    Imports

    Exports

    Sections

  • url_launcher_windows_plugin.dll
    .dll windows:6 windows x64 arch:x64

    09469aa35c6fc60727347bb94980d686


    Headers

    Imports

    Exports

    Sections

  • vcruntime140.dll
    .dll windows:6 windows x64 arch:x64

    44c3854843f7a3fccdf8ddbbea66f302


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • vcruntime140_1.dll
    .dll windows:6 windows x64 arch:x64

    ae0bde6314fa2027b54ce04898f6ab69


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • wawa.exe
    .exe windows:6 windows x64 arch:x64

    97838f6eb8a0fe669dda5a8175dd0b8f


    Headers

    Imports

    Sections