Clie123nt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Clie123nt.exe
Size

481KB
MD5

c5eab58123eed9ee5a16e516e9126420
SHA1

8e81e95b58e0436e93bd4bf16215250376976efe
SHA256

1bd3f889c374db9ff295cd5afb54812406a1b4d65d4e078ea38310d418cf9005
SHA512

f78e622d76a8230b3346e62de9e08de23bdd5b269821ba097844b4f9b2a9d3b7418b7e30a18c3cd167a2e7c0319155caddc6dd2237eda656a1558b13c1717f92
SSDEEP

6144:tGF8pUB6XNqYSbKoeLw3lZv3Me6VlWT8b9aoMt8GQGJxE/rf8ohPbuifziLBT:YF8pnNqJMLw3rv3MPVle8vnGGfT9zA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Clie123nt.exe

Files

Clie123nt.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 478KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ