Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

535KB
MD5

be5d1a7e804bd370b1e0a0a1c4a2bd6e
SHA1

7bb9226553208fd46496165726b8272afbc65a09
SHA256

554da4d525d35360aec831e0970c1f4c83644add18700aa81f0a95eed2c049d3
SHA512

0921a27221344b94ad80796901a98e5595687ff7582e5005c3e9887c91eab7ace51cc28a32031534820bd80a52bb46ea957d7db666a9a61c40c9c998b22ae8ea
SSDEEP

6144:saZSxkE1Rbl6XNB3Fe6VlWT8b983nU1A4DR0j+b9MAJftsbiY+n94VO:sWIyPVle8yU1A4DNMAJfxyVO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 532KB - Virtual size: 532KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ