Static task
static1
Behavioral task
behavioral1
Sample
Client_Guard.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
Client_Guard.exe
Resource
win10v2004-20240426-en
General
-
Target
Client_Guard.exe
-
Size
417KB
-
MD5
23f1816355cd561a191e288ecf98f835
-
SHA1
3e02dfa8192dce793a7048cba120bb8ece59fdf5
-
SHA256
e74f02eb66bb02633be38b1baeba56c8c0511657e5e52d3a1c762bcee6d3dc14
-
SHA512
bdfe4be8ec95c0d5c50f6b6dc52c5792dbb754a44b6d27ae3918487c3a63d0b5d8a3364c2715d87f87bcb8c378c0865960ee7e68eaa6a248ff69bb2147a230d9
-
SSDEEP
6144:Ub7PJZ2NpHoEwGR1ApdDJx+1j8JCfufaiIKomng3MtTHMLobEZ:UBZPErRMRJaj8JXfhIetLMLL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Client_Guard.exe
Files
-
Client_Guard.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 413KB - Virtual size: 413KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ