Overview

overview

3

Static

static

3

dnscrypt-p....5.zip

windows10-2004-x64

3

dnscrypt-p....5.zip

windows11-21h2-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    dnscrypt-proxy-win64-2.1.5.zip

  • Size

    3.4MB

  • MD5

    74bc7bf0b5c730c44db18c70f6918545

  • SHA1

    c8b4db15b29ec19b118d9af427ebc2e4788d6267

  • SHA256

    55e2689b8604f7de88d6cfe0a5396e166acce1acae51adbddb314e36eda89a9f

  • SHA512

    086004feed45419d673eae4b332b7c2be513908fd1e7494ac7115edf904325cf1124b3503af39c8f56ebb7fbf701df127b16d9f65e5eb3619e985ce7afa3bacb

  • SSDEEP

    98304:TXeMffwVfUrTi7so6yeERIkIiCASryynW:64nXi7f6ibynW

Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dnscrypt-proxy-win64-2.1.5.zip
    .zip
  • win64/LICENSE
  • win64/dnscrypt-proxy.exe
    .exe windows:6 windows x64 arch:x64

    4f2f006e2ecf7172ad368f8289dc96c1


    Headers

    Imports

    Sections

  • win64/example-allowed-ips.txt
  • win64/example-allowed-names.txt
  • win64/example-blocked-ips.txt
  • win64/example-blocked-names.txt
  • win64/example-captive-portals.txt
  • win64/example-cloaking-rules.txt
  • win64/example-dnscrypt-proxy.toml
  • win64/example-forwarding-rules.txt
  • win64/localhost.pem
  • win64/service-install.bat
    .bat .vbs
  • win64/service-restart.bat
    .bat .vbs
  • win64/service-uninstall.bat
    .bat .vbs