New Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Client.exe
Size

251KB
MD5

ad2805d7c62bccfe01076e3b639a930b
SHA1

ec3dd25a644469a3f7605a5aaaae5befddb15542
SHA256

fc1ed0825c337140d754eab2bf4fd00932caf77fc45edb440ad9d1da37cd71f5
SHA512

48f050d186459bbd3eeabec1fbc2fc761c70e5c06fa6ba75cac0ad69cab8d405874390b3110fd2c92106eb9b7b8d7662155c7b8058e6bf9d56507c483fec01ca
SSDEEP

6144:ORBEVF/9dFkC9rujD4/LW/poYV9HK+mEoEg:k2VfqD8xE

Score

1^/10

Malware Config

Signatures

Files

New Client.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ