Client-built[.]exe | Triage

Sharing

General

Target

Client-built.exe
Size

220KB
MD5

05a8237354055f7295e1562c9341b9a9
SHA1

b8d688c29921121067771f163f0e40a3f47435be
SHA256

c3770fcf439af929d75a84da8330c29ecc797f314710bf64f30f7ff37e3d400d
SHA512

671a3d32a88080a9783b67b06c76f77d9c8caa754842fd6287f8e083831c672bd34a387c47a8473d4a523c0b9217e76d508b64207670aa93bc9833e764f75f10
SSDEEP

3072:e+6PkTKU+eEgRHFER4FNFnYGhYDmgl8bBMFpkpijGgLKJYohb9gdxPI+zwuq0WWl:ew+XVqnDYDVl8qCijfjohb9+xPBYT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

Files

Client-built.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 217KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ