v2raytun_windows[.]zip

General

Target
v2raytun_windows.zip
Size 67.1MB
Sample261102-mwfemsbs9r
SHA256 cc8405d52b1a2b3b3c1ab01ab4100c7eaee14bf3cc56ab02e95b7a8750d94159
MD5 849dd5e0c662fb35f6257a22188ab145
SHA1 0e7d43317df8453022f399b899a8a7c0d7745487
SHA512 752593407273ebdc366588b27a97d1e7dc7987d423bebef67c42639556208c86ad559c941d8d8a80e73b82de3b0a9e203f01ae34ed93decdb76cb76e72be5a97
SSDEEP 1572864:qP0Kd2NOIRQLYcez/hDM6kLaYtBNKXfm+uAn6fC/Idc:K0YNLQTh1kHB4XfmDAnIbc
TLSH
T136F733FCF0DC4B30D8D2612576C9AF736FEA9EA40D71E28E0CCA6B7A0441B9553C525A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/v2raytun_windows.exe

File Explorer

v2raytun_windows.zip

.zip 67.1MB
v2raytun_windows.exe

.exe 67.1MB

v2raytun_windows.zip

SHA256 cc8405d52b1a2b3b3c1ab01ab4100c7eaee14bf3cc56ab02e95b7a8750d94159
MD5 849dd5e0c662fb35f6257a22188ab145
SHA1 0e7d43317df8453022f399b899a8a7c0d7745487
SHA512 752593407273ebdc366588b27a97d1e7dc7987d423bebef67c42639556208c86ad559c941d8d8a80e73b82de3b0a9e203f01ae34ed93decdb76cb76e72be5a97
SSDEEP 1572864:qP0Kd2NOIRQLYcez/hDM6kLaYtBNKXfm+uAn6fC/Idc:K0YNLQTh1kHB4XfmDAnIbc
TLSH
T136F733FCF0DC4B30D8D2612576C9AF736FEA9EA40D71E28E0CCA6B7A0441B9553C525A
MD5 SHA1 SHA512 SSDEEP TLSH

v2raytun_windows.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 8a875738744a3defb3091b1bca62f365d2570d00fc5584e2a78e229a95badaa8
MD5 943e373267b72d7954ed58b92031e49b
SHA1 2696941868ffe4e8fbc93aacdf0934ccf0db448d
SHA512 b7a42ea0fa12eb2ef75f24070069f2fb5cd8bdfa112782d1b3f572a6d1687005981928bca34f5a079c92f78cd5552a2f29c3619ac850838ba72ab86133464296
SSDEEP 1572864:cfpARCRukvutos4pJJHG6Ad4WrBDcR1c6m2PU16lk5D:EpcNtkDJnA1B4R1cv2PMrD
TLSH
T11EF733EC30DC4F30E8D6623546C9AF736FFAAFA40D71E68E0CCA69BA0441B1953D5259
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

16686

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

v2raytun_windows.zip

v2raytun_windows.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

v2raytun_windows.zip

v2raytun_windows.exe

mscoree

dotnet