TestClient[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

TestClient.exe
Size

709KB
MD5

921015912b0cae3033c3b9bbeebe75d8
SHA1

c5e4a5ee22561e9461c2fe0c0f35e547841b8f64
SHA256

49634fcb718e28651dbb0482f41f35465e799145de2293df73e700a48bccd219
SHA512

4ab7922aa0a9e7816261014a9c96948a3e33d602c0cd9bf0a82224479cd05c1ec6ee1e45fd7e4d96bdaf1d8653fb2b8a4d442674db49a74feb9ad2e6d4f9bf4e
SSDEEP

6144:l9JjCM/VvVasIU3b9tA+07e6VlWT8b9jmuI3Lb2F6HeQ6+GIIIIIIIhIIIIIIIIn:1jfVa6DqPVle8w32QeQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TestClient.exe

Files

TestClient.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 442KB - Virtual size: 441KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ