Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

497KB
MD5

d635c12e72e9edffd3d8abc0be3ae6bd
SHA1

9a5c8617bebca5b29ec9bfc610a4f1e41278414e
SHA256

5b5277163ced0d2dca11ef27a1ceff74688fe3e2da6cda9db84f34dbece81e6a
SHA512

051a875bbe50c338140ecff7d5c37221aa19ac53eb248dda3fad543498180b561db889274fbef2da0f198bd16c6fd0ceecd2f52a99d0d8d8c63910481fb18ba9
SSDEEP

6144:xs1X7ozGuqE0XXz3wTQQEO6e6VlWT8b9mAAHdFUD8QUbh6PT68:WpozqKgPVle8gAyuD66PW8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ