Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

287KB
MD5

03d8412856c1aa264919bb3d7684e0aa
SHA1

79b36d1899478dc83848f5d45f16f14da1d6dd55
SHA256

d1e9c4062a222adc963d07ffbc948bc5ab0fac3223e52a064653b4a026bc9311
SHA512

4a6baee4abf5e37633844140c1deabb6163f263e9697ed497e1335572b490d69ab6c8b2f63fa6d81692d5fb6cdb0073f87fd5916b55c96350ce0a86c00ebc8b1
SSDEEP

6144:WkRpeI/cVYaxiAe6VlWT8b9i1IMCQuPBEObkNmHKdf:/0NiitPVle8AmLspdf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 284KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ