Static task
static1
Behavioral task
behavioral1
Sample
ManageClient.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
ManageClient.exe
Resource
win10v2004-20230220-en
General
-
Target
ManageClient.exe
-
Size
14KB
-
MD5
9c724e704b34c86a9bb552ce3dd2a056
-
SHA1
3ca02e94baba80188040b1c68b599e023efed25f
-
SHA256
d55e80fa9e833733857bb9fde60c103fe3a44fd72884be0b22aa55bfffccc420
-
SHA512
6aa084d27f66038afb61f0a064f87474824ac3789d13265d549758a2624420a7c02db79066c4843ab94598ce35580f2cc1d1c95f15b7b76b0e09627bc868b1e9
-
SSDEEP
384:ff6MUG/okd7nD0L/lfqTG+5yLQjRhOosJz:fSMv0L/lC4QFhpsJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ManageClient.exe
Files
-
ManageClient.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ