Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

155KB
MD5

1ff1eb58d6af92117de61e1f557c282e
SHA1

93066677426990e2fa7ca28ff12e3a8bc7e1f330
SHA256

93ed1f4d1ff552d46eb4e93982f50ce34285f4552a570243c0aa876fd28b0b43
SHA512

70ca1a210055048ee6a8b0fb7e498532a8ac01921ff37a91a54e71309f388a44515541c3f093b5c1c808cedcb85237a91409908aed6a3facfaa1b3cc0a1e7e36
SSDEEP

3072:dhCIEVimzSn823Fx/zZ4TOY2osWxF68eaoLCLt1hqAKVJcPZ6A:wtzSnJTN4ynaF68hoLchqHDq3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 152KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 177B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ