General

  • Target

    XClient2.exe

  • Size

    305KB

  • MD5

    41937f4868b05dd78c7ebbae7f3da904

  • SHA1

    5b1180731b9da3b45042aaf5ee803240951a2bc4

  • SHA256

    1a93aa24c6831262abbbe6ff5d4d0d1fbadd29c90b56c05ef42ace8e5e1894e1

  • SHA512

    93757f20a8193e0b422a85b43713342e92e0c5ff9185e571352e6afde3dfb90a27602318b46e8024a17d936808da4a0e46837b69cbe086feca6b16a426e01e45

  • SSDEEP

    6144:/LMDOWBGLzQbbRU8j5txlnZ0q/p3iT+lDAA:DMDOiGCx8qx7dAA

Score
7/10

Malware Config

Signatures

  • .NET Reactor proctector 1 IoCs

    Detects an executable protected by an unregistered version of Eziriz's .NET Reactor.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • XClient2.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections