outshell_client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

outshell_client.exe
Size

8KB
MD5

8f0752f59a496d2dd7425029ed9fcb22
SHA1

19678ffe3bda72f5631ac6564fe4afe69c6dbdc1
SHA256

2322cc311ef68ed38fe3c8d6900ca483a567c958a91575e0908e3fffe8925d9d
SHA512

447b4727a0380a57c563572c047bea8fc2c002ed8fda9182c8ba1bd58a41d5c4aef7228752f8b63b3025526a07c8ecb12612e3476f18a7abd7ea8baf0d0dca52
SSDEEP

96:LdIMhKKRe6kPM8XZU43W45vrdwSZSxxViDw00+Y+VgnPp50GjLRIC0WBzNt:5I0KKRe638p53WYeSsfD+Vih5TjatWD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
outshell_client.exe

Files

outshell_client.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ