Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

278KB
MD5

79b6cfb92fd065e8295de36dd4762757
SHA1

bcf40a54b5d0932aa71fff7c7d7624f32e6e6b44
SHA256

5af4ba0432c274ed97d3e7c7b1a749abb9e3354bfaa950b23032e1dd098a4338
SHA512

71010f0f22c30cb1540f26fa7060233b669ad1f2606b71ce556dd7e117d378159015d34fffeafb07c82f319fbd1abc301de884534011360f6ec6f57c1c6bc919
SSDEEP

3072:Zzt6/67uDZ32yGwRk7CnLNeN3w/jhlhE1Z8Nig98zcnJI4M1ZPnhbPdTPi+FZ:zI9nZe6VlWT8b98zcJIV1hbp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 275KB - Virtual size: 274KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ