Client[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client.exe
Size

364KB
MD5

283454ced24e4dcc9fdd7ad5f98356b3
SHA1

b0c56b40f89aaf58f0f489fae2fa8c3174155d15
SHA256

1d38e5aec7874c177331392fa1eb41d5e52ea997ce64dbe7bb6025d7fff48986
SHA512

bb88979b8f6e13d5437464a8fa5e8192ed2e4c44c314c9a6c088ff9459510889eb4cabd43153d213a92cadfc4d682bb6328031d0f357b2028a333d9a14776af0
SSDEEP

6144:pxjz71z3lZ6gP0tUjKYAkljYWKua0bCbHeoUbN:vjzrPGYZjYWU0bwEN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client.exe

Files

Client.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 361KB - Virtual size: 361KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ