5af5b10a207d8815b5d690a3d9bdd420575f1b7f0fc60d1f407f84aad5429ae7
- SHA256 5af5b10a207d8815b5d690a3d9bdd420575f1b7f0fc60d1f407f84aad5429ae7
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SSLVPN.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
SSLVPN.exe
Resource
win11ltsc2024-20260709-en
windows11-ltsc_2024-x64
3 signatures
150 seconds
General
- Target 5af5b10a207d8815b5d690a3d9bdd420575f1b7f0fc60d1f407f84aad5429ae7
- Size 2.1MB
- Sample260811-epldbawanb
- SHA256 5af5b10a207d8815b5d690a3d9bdd420575f1b7f0fc60d1f407f84aad5429ae7
- MD5 a72130e209f46bea82bf3a2c9801f3db
- SHA1 4c230daf094956660d2465a725a58de25bd8e7e6
- SHA512 bbb3e40dd3eed34cab2229c5a3547846db9b340900ac07ad20ebe0947860fbb3783414876bc0c2a32642751c11805e4e090a42570cf19bdb692bc64eb337c728
- SSDEEP 49152:MNRuwqyEDXT7lekSXXZVdYI0balQKihZHChOtd1hu:MTuwqvj7PSXtYIcyQPZHChOtdO
- TLSH T171A533468C8A841F57B0BA9AC6FCF35455334025C0FCC3B22DF56AEA3E4C7A84DA5795
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Untrusted Codesign Signers 1 IoCs
Codesigned file was signed by an untrusted entity.
resource unpack001/SSLVPN.exe
File Explorer
-
5af5b10a207d8815b5d690a3d9bdd420575f1b7f0fc60d1f407f84aad5429ae7.zip 2.1MB
-
SSLVPN.exe.exe 6.0MB
SSLVPN.exe
- IMPHASH c2d457ad8ac36fc9f18d45bffcd450c2
- SHA256 7c38e4be8e7472142fa714c729a77940448e66f7d614d67f915ba39b23d87a1d
- MD5 cdf6f8ab81c12a364e83e4dfad8f4f19
- SHA1 b1501c16e95acbf5236d06cfda451f0d51b42fc8
- SHA512 775e94b2cd223f820a11c8c80f8cac22acc4d9d92e5930007314ef1ec70a0ed28fd6bba79f8015296a9868ba356841742945c6090e4086ca98d40596bda60efe
- SSDEEP 49152:LTFAJXGPprq/kc+eRF4tjkErUSYv/6yQbjRqypvmd7/p8BpC2Nc6vW+Iq0gi:OQxcpr4o/6yQqvZ/b5
- TLSH T174562A47BE9081E5CCAD463489A392627B707C485F2157C72BA0F67C2FB67D25AFA700
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Untrusted Codesign Signers
Codesigned file was signed by an untrusted entity.
PE Signature issue
Digest
13:ed:d7:cf:15:9d:15:a5:b4:cd:4a:4d:ca:4c:9e:8f:e4:7c:20:ac:c6:95:47:98:96:e2:f1:b0:f4:44:1d:61
Digest Algorithm
sha256
PE Digests Matches
Trusted
Not trusted
Signing Certificate
CN=SSLVPN Code Signing,OU=Client,O=SSLVPN,C=CN
Chains
Aug 6, 2026
CN=SSLVPN Code Signing,OU=Client,O=SSLVPN,C=CN
Subject
CN=SSLVPN Code Signing,OU=Client,O=SSLVPN,C=CN
Serial Number
23:1a:59:4d:75:4e:d0:31:c3:73:06:da:74:8c:90:ee:71:6b:25:8c
Issuer
CN=SSLVPN Code Signing,OU=Client,O=SSLVPN,C=CN
Key Usages
KeyUsageDigitalSignature
Ext Key Usages
ExtKeyUsageCodeSigning
Revocation Status
Not revoked
Timespan
Aug 11, 2026 - Aug 8, 2036
Minor OS version
1
Major OS version
6
Entry point
463264
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
kernel32
WriteFile
WriteConsoleW
WerSetFlags
WerGetFlags
WaitForMultipleObjects
WaitForSingleObject
VirtualQuery
VirtualFree
VirtualAlloc
TlsAlloc
SwitchToThread
SuspendThread
SetWaitableTimer
SetProcessPriorityBoost
SetEvent
SetErrorMode
SetConsoleCtrlHandler
RtlVirtualUnwind
RtlLookupFunctionEntry
ResumeThread
RaiseFailFastException
PostQueuedCompletionStatus
LoadLibraryW
LoadLibraryExW
SetThreadContext
GetThreadContext
GetSystemInfo
GetSystemDirectoryA
GetStdHandle
GetQueuedCompletionStatusEx
GetProcessAffinityMask
GetProcAddress
GetErrorMode
GetEnvironmentStringsW
GetCurrentThreadId
GetConsoleMode
FreeEnvironmentStringsW
ExitProcess
DuplicateHandle
CreateWaitableTimerExW
CreateThread
CreateIoCompletionPort
CreateFileA
CreateEventA
CloseHandle
AddVectoredExceptionHandler
AddVectoredContinueHandler
Name
.text
Size
2.5MB
Virtual Size
2.5MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
3.2MB
Virtual Size
3.2MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
164KB
Virtual Size
719KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
96KB
Virtual Size
95KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.xdata
Size
512B
Virtual Size
180B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
1KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.reloc
Size
59KB
Virtual Size
58KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.symtab
Size
512B
Virtual Size
4B
Characteristics
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ