Clitor[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Clitor.exe
Size

656KB
MD5

f0d836b6a779fb43500ad4a1fd897547
SHA1

2373acffbb23b3ec39f19a6225c6f587958564ef
SHA256

42889910cb1336b1c9db1c5566fe390073538267863e198a1f3cc7380f74acd5
SHA512

3f8453376a79d63b079811d94d68d06219d27bfb41f5c30af823fc5e8f27c242261efed7782ab7a9bed81efd35e359fb6ff26d5b1eab03662df3947d334ab403
SSDEEP

12288:y48s+1tGLhOPVle8BfbBSQqIVIydljdP3X3uO:yJ1tuhAMQqIVLPdP3X3N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Clitor.exe

Files

Clitor.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 488KB - Virtual size: 487KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 167KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ