Client[.]exe | Triage™

General

Target
Client.exe
Size 264KB
Sample240604-rt6k9sac61
SHA256 e91028292e9f544999a641c8656895a4cfec809d5c9e28429e4233f5d5a894b7
MD5 612f4e90461be10c465ca2037cfae0fd
SHA1 3f72719ef621781d53713cae90a68cc2967b69d2
SHA512 76e8a376099ed58daabb276d21f25bba49e322f23dcb3c9fe1efe28b1dfcae88c7af13fe0e34999f29f252a793ac48b67ef23901d0935c9ce34701e68cce2fd5
SSDEEP 3072:T+C7mnudxFQjk4KYF0Nt8NeN3w/jhlhE1Z8Nig9Out+00pRF5VXbbkhdtfjuSI5:6AmnYQr0Ye6VlWT8b99800VbQdVu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

File Explorer

Client.exe

.exe 264KB

Client.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 e91028292e9f544999a641c8656895a4cfec809d5c9e28429e4233f5d5a894b7
MD5 612f4e90461be10c465ca2037cfae0fd
SHA1 3f72719ef621781d53713cae90a68cc2967b69d2
SHA512 76e8a376099ed58daabb276d21f25bba49e322f23dcb3c9fe1efe28b1dfcae88c7af13fe0e34999f29f252a793ac48b67ef23901d0935c9ce34701e68cce2fd5
SSDEEP 3072:T+C7mnudxFQjk4KYF0Nt8NeN3w/jhlhE1Z8Nig9Out+00pRF5VXbbkhdtfjuSI5:6AmnYQr0Ye6VlWT8b99800VbQdVu
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

275822

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

Client.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

Client.exe

mscoree

dotnet