Client[.]exe | Triage

Sharing

General

Target

Client.exe
Size

6KB
MD5

48c8de4fd8570eb59deb10f83529aa84
SHA1

6ddd755c0b8d2d6dbef5df4bd82032d2a5f51924
SHA256

4cce18f786ca6eed861fbd90f1fda0490051f973c8c63f3898e193599c068140
SHA512

284505a695bb9a866bc79fa2ed81a89ede95257d4141488ce4c97ff26f65895df1b3e05dec1cb55c0989398c80e742b3ef98dc952da8daa47ae295f03e2ecad1
SSDEEP

96:R9zt+9mSULOle+O0xiR5bbLC11IuKBfzNt:7t0jY5fLC11IugJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ