Client[.]exe | Triage

Sharing

General

Target

Client.exe
Size

425KB
MD5

e1ec0c054d516d6b7f17af804cc78f79
SHA1

b92e1f75b725377bc8dd17ec8751c315a404651d
SHA256

acd0572a7df0ede556a4037253cb272eb735ca395e07197110517a766993f595
SHA512

8bf68b1ecff46128c63b41b51d11de88c372db29d07b6e8fb3054c408fc70f7f4a2253aef72a6d5ad9816300143d9dcad182b3de02fc3394be0b97b00858dd23
SSDEEP

6144:i5V1329/dR522IUe9OjDove6VlWT8b9Z4Hq9VivdhscS6bkOno:i5H822Pe9/vPVle8g6sUBqo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 422KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ