Client[.]exe | Triage

Sharing

General

Target

Client.exe
Size

157KB
MD5

3d8e8076e9669284ecf79adf28a3c589
SHA1

7728302139e6e14e62e91988b694bb7f07c50839
SHA256

99f1de16413844a0134292c235e03d19abbeebcec7a61848f73b46fbe19b8d43
SHA512

d83ff3873753221fad73131262fbf9f7ec3d331ce26f75a2cf65ccd2aede75f761fd4f2d17d1f9300805564fa28ec92d11343ed65045ed1772f5280f6aebbca7
SSDEEP

3072:KXeUZVaLio9hPFkpMVn/sMM1hn1DYAPR6h2g:JLt9cMV/sMMpDYa6Eg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ