New Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Client.exe
Size

39KB
MD5

e9e257310ab8ef4dbd35c163ae9e71f1
SHA1

a2a9fa870f6b98669783dab4bceaf1d0159a7400
SHA256

8af011a4512f67d219a5b8b268aee64438614a770c0627175a35069e1a8b24c6
SHA512

6626f212156c041e2550c33f69ddcb64ee59bddd16ada5fe403757c820245c75f3126faf3002ac5e525344a2172dbef696ab033b7f870ffd3afc3e1a58cdddaa
SSDEEP

768:VvAo9se/iQVam2dGA4r5wR8yDNRXCMBja3ExgqWaEarz:iSVam2dGf5wvDPF1GCgVez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Client.exe

Files

New Client.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ