AionClient[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

AionClient.exe
Size

1.3MB
MD5

c1a5a0dc432c5e165b9ba83470a0864c
SHA1

1689c364a94db54d025a2acd321cc07a927cf81d
SHA256

ced0153f722801b8ffdd4749fc7ae1e1f355e3f7d4af5b58ffff8261caf0cf6b
SHA512

6035ebecf71562256a2ef7e84e9eee92231a809cdb53ba728c8e7b95fe14c6f239700e9a6923216a9c323c05148fdca99a8983ac6987ab415960dc0b8ed7a299
SSDEEP

24576:bIC1jtsbTffUxBNj0FUJtOdYppBMtpmvS7aFl+x7r8Ouv24nCiqsV:bjjtUb894UJtOmDipmaeForvgbnCVE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
AionClient.exe

Files

AionClient.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ