Static task
static1
General
-
Target
XClient.exe
-
Size
204KB
-
MD5
df01fb377599c2ae0a4fefa001c37336
-
SHA1
31d78a826e0d95a99ead70e9b04e59db86fa3cb1
-
SHA256
807f4c0807105dd47669e13a09f2159cc9bba15e0456fa6dc0b871b649b41742
-
SHA512
2ae69f2971aac84859b0dba3d766831a31432c059be9273e253f326ad9d6d6d4ec4e5f605d79d1c742754c5e601fc0744be8b8ddf6b552fd67dd3c2ed1c4cdb4
-
SSDEEP
6144:aCEcEqS2E+evu188P93HGybwPHqEbM66uUjxIgBe686solYn/878DR1swJ+1opJ:WqSz+GutpmXPHqEbM66uUjxIgBe686sH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XClient.exe
Files
-
XClient.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
23274 Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 139KB - Virtual size: 138KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ