CGVPNCrack[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CGVPNCrack.exe
Size

90KB
MD5

a131c514b52f3d65368ac8f072cafc43
SHA1

4c85dd16e1929ba8a205dd2d0f59c4096e8e58c1
SHA256

229a0a659dd6a751db9456fce67190399909c4d17c43ee2421001adcf96ea692
SHA512

3d2138a25a4c44ad1ca5cfa7fba071576a21b506559fa1366367a3f4594337300659a111e3f7b79395598331b6248cfe92add3f85a234253ca8bd563508b78fe
SSDEEP

1536:Ysq5cUQjwAny/lR2HUCn6rCTCUVmxsxQY7lsGj+FwWd7hf3oPditBZdVs4dVMNCc:KcU6w4yrMBn6+TpVAsiAlszwWd7hf32L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CGVPNCrack.exe

Files

CGVPNCrack.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ