XClients[.]zip | Triage

Sharing

General

Target

XClients.zip
Size

31KB
MD5

75ce8760edc2fba15bf4d91168fe9fe7
SHA1

6a8a4d2922b046ec498051ef82cd4dd88130f386
SHA256

2fc74e3071f7436392cee0438ec4e9496195785701d14bf91d83bf3a50a92a9a
SHA512

0bd4de73805ca805b56c19643400d3eacfe21b6702346cce4019a90e57793b2807f3c47789578fcb49542b92e71ad0e0333d01129ddf21afffd72e6ad82c98d6
SSDEEP

768:y1ZQzVsI+BLwMMsgRLWN8upx5mOyLbBJ+si8uA9dlflcCCU:SZQhsIYcMEw8upX1+bBJPiwdhlchU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/XClients.exe

Files

XClients.zip
.zip

Password: 123
XClients.exe
.exe windows:4 windows x86 arch:x86

Password: 123

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ