New Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

New Client.exe
Size

248KB
MD5

ae742015bf5d5e1dcb286c44f9396556
SHA1

a3f151b402a8b2bd375f71b7e6c760353b817fc0
SHA256

1a9f231defbbed4b9d02adf6ab390aa897161be52e8e3ea89ec8e05ea2a94f47
SHA512

45f5067a21bd253ae53c98e4bd44f8e940b21d9e1989f4ef2ddab2c3ef0d97484bdc1e7adadd9eed4a52309ddcfdd9bc867ed3d6b899f6d378005235d24df5b3
SSDEEP

3072:DIoBPtFVXJ6PWQLI3C2zj8cTOA+vMKeTl2v09vKKqND+Moh/VQtHZVu:DJBePWQYCQbT3KeTT9vKzzo8tH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
New Client.exe

Files

New Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 244KB - Virtual size: 243KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ