CitrixOnLine[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CitrixOnLine.exe
Size

51KB
MD5

21a63877d25565fd211d6f2ea3a8f152
SHA1

e1bddbaf2a8c6dfe9772fdb043a643a87ad288e6
SHA256

fd0141df9d5a78e189b863dffebf92311a6bce4da336283a6d11b00641830513
SHA512

fc2ab2c99d25b01b719284f8a30cabfa5485d2044910886729b2a1a7c5bf88df9184b2bc09cca8143579d40f53ad267e6f06f42244f29ff9b089040b1602e1f6
SSDEEP

768:iYKlOFekplwH/3XbOfq1Ekg9fCpk9dEAHJPdVbOddwmrkzUqJ:iLlfkplybOOg96sx4dwn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CitrixOnLine.exe

Files

CitrixOnLine.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ