Cl2ient[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Cl2ient.exe
Size

458KB
MD5

b928978a8cc3aa8b809dd621836fdb05
SHA1

da888a47d3d5c56b9f66cab0ad164c4e0350a3ed
SHA256

2b314e68ff5d8fd22614b8136a22b0d6900ad4dbf9fae04544f587018788b2af
SHA512

6d6e8676030981a87fd4712baf8338cd09404264cf0309d0ca6bf19e792d5bf0658756f6b3a04fecfaf7ec66339f1702674308cf3e3ec6151888850d304f7322
SSDEEP

6144:RsxY1IKOZOpT94/5oq7zYtuT3qo7+5XphgRCg0idJx1SbyWYKGukknk:ROZqJbG0rpph3glX1rh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Cl2ient.exe

Files

Cl2ient.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 455KB - Virtual size: 455KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ