Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

1011KB
MD5

ef42faaf9184d653bd3f1c74f42a5427
SHA1

e7e509210472d61a92b34fa3a235aec42f3fcf3a
SHA256

045d399b56eadf5f406b55cede36e0e0d3861981a100b90aec68e1be6cbd3d7e
SHA512

45f79a0b146a26d4668c7b567e9da54c678ac58e4812e123ef22e6829c27d43d508c15c386b326a3e377d4d3b11917606e97c45676dfb84e18bf067ffe3eac1c
SSDEEP

12288:6ASxN8RtNyZe5hKdXmGpQ9Kil6lIE0bM+iGFBIVE:xGmzyw5hKpQsil6lAFZFye

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1008KB - Virtual size: 1008KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ