XHVNC-Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XHVNC-Client.exe
Size

61KB
MD5

5db2dd77da84922299d1fe9398c6be41
SHA1

7d97f10a37ce4c0f1ccc28edd8ccf58c8990bd01
SHA256

993e27c71ec3e6c9f157182137dd545d8513ba723ad3cd8b15d541f00a082c2c
SHA512

ad4e18db55f32a4f00bedc363545eb80ca9450697afd6ab3b40baffed003c4236dce0f3ad07572e514d58e1ac21675c55b989a3b3dba46d0503ac788ecf63695
SSDEEP

1536:aaRmGCCb59dI9Jm82bB65VA85FG/Gd9Wz:bRlCCVM2gA/G+z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XHVNC-Client.exe

Files

XHVNC-Client.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ