Client[.]exe | Triage

Sharing

General

Target

Client.exe
Size

253KB
MD5

f7bea0ecab72f62723c2557d52dd56ed
SHA1

d1b0d1fd02c7192e03163de4dd66095a39b49076
SHA256

446f2ae338368abe954d2417fbd953c371a6e8787c2f2236a1b399fb55846e48
SHA512

1489bcffdcfe5ad147639d0eceb4242d6dd7095be9f1dfe89e80a6c1c46fee076c0f299e21addc75a526d6fe11c5a16c4ca403de10e8dfcfdaeec2af28a5c909
SSDEEP

6144:WHgnPV2KM6IN+Sq9e6VlWT8b9axsyqbk9Rbzock:yUlzPVle8P3QFoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ