paloalto-vpn-client-2[.]1[.]1[.]exe | Triage

Sharing

General

Target

paloalto-vpn-client-2.1.1.exe
Size

16KB
MD5

8ee29216a2c06d3e5f89ae9733366405
SHA1

b39570fa6466d2abdb74263cb78ab261fcf9e7c6
SHA256

832113e18b31afb0718112b130bfb301719785b1cf175c6737321ab50c62a6f5
SHA512

a112c5abc8f6f784036a53298a9621bac6b2bd3c7f77ae768416ddf97028e2e93165d69e15de9d846da8d4714d01e0288cb50be85688b8b03703a6fdf1d505fa
SSDEEP

192:dPSlEocxhEqBhs56fVlFF3VjwLV0NMqxSTe5hfD:dToArBhsmVKwdMk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
paloalto-vpn-client-2.1.1.exe

Files

paloalto-vpn-client-2.1.1.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Prorok\source\repos\test\obj\Debug\paloalto-vpn-client-2.1.1.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ