XClient[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XClient.exe
Size

75KB
MD5

5fb6e31e9519aa7790b5f6a3f5b3c4b1
SHA1

10fc0f6d3b3091d3c3204b991c40bc4f250d7235
SHA256

6ea0601719d9c7d2aa6ddc8bb032d152ab2ece72d0ff26eb740d1e727c25d08e
SHA512

ec7c20dc8e625b869dffcd84142eb7b05a7184511d512b5159e6418ebfb92ca3fad1bc4cac4c54f188bd84f1b3cd855f9b483a7b1aef3dc601f008b678bf25e0
SSDEEP

1536:hgdVgHaeMArkF4bOiuUzx0ro6V7iOr0y2qPZ:edOHa8bOiB+WOr0gZ

Score

1^/10

Malware Config

Signatures

Files

XClient.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ