MarcusVPN-1[.]1[.]5[.]exe

General

Target
MarcusVPN-1.1.5.exe
Size 681KB
Sample261022-wyjphset5t
SHA256 865891395f008ef1aba19a4b5ad5c3b3daf905352840e46315e86bad3df23963
MD5 abeea19404c8a30427d671c728ba89a7
SHA1 751b43ba5c4ecceb9fb55868847293a6b24648fc
SHA512 2fd82b1db9a5a1c72a06e2193319ff8b46e2f53400a26e7c3a236f9eac740df2af593454e2903ff9f5c3eda403ba96f1ccebdb76a0cc39be91e91f7035117bdb
SSDEEP 12288:ag+tYbMPtfaICf26p2DBTzC7PPl7anHFHL1DqpfiaSGUFKPtYbMPtfax:bON9C+SlMPmpQDFKFNs
TLSH
T1F7E4020AFFD84A61D56F837C8965416243316916E35EFF8A1C9E6CFD29A7BA04F00393
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
MarcusVPN-1.1.5.exe

File Explorer

MarcusVPN-1.1.5.exe

.exe 681KB

MarcusVPN-1.1.5.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 865891395f008ef1aba19a4b5ad5c3b3daf905352840e46315e86bad3df23963
MD5 abeea19404c8a30427d671c728ba89a7
SHA1 751b43ba5c4ecceb9fb55868847293a6b24648fc
SHA512 2fd82b1db9a5a1c72a06e2193319ff8b46e2f53400a26e7c3a236f9eac740df2af593454e2903ff9f5c3eda403ba96f1ccebdb76a0cc39be91e91f7035117bdb
SSDEEP 12288:ag+tYbMPtfaICf26p2DBTzC7PPl7anHFHL1DqpfiaSGUFKPtYbMPtfax:bON9C+SlMPmpQDFKFNs
TLSH
T1F7E4020AFFD84A61D56F837C8965416243316916E35EFF8A1C9E6CFD29A7BA04F00393
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

579246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

MarcusVPN-1.1.5.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

MarcusVPN-1.1.5.exe

mscoree

dotnet