Glock-Clicker[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Glock-Clicker.exe
Size

91KB
MD5

f4bf2ca341605754004569379d6a64be
SHA1

78ddbf1fc6f8e03120a5dcb20ce1cc1f8a09eb3f
SHA256

1daa02cba0149e84379ca8e6a79788009457bfdc3b570017567bd0a37bec58ef
SHA512

7fd0f74704dca7679c82d14fd39e7bd954ef4edfa426619d58b9e1a457634c69221dc79ac0e2a935bc9e9baed2be0ca068ebd25006428fae03e0371faa16c388
SSDEEP

1536:Wr2B08TB4nI7Gseil0+uE9EDUl+6+U7nwDMk7vSb+Asnxy9ypGeSfRQw:ZB4qtmWnsMk7ab+Asnxy9ypGeSfR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Glock-Clicker.exe

Files

Glock-Clicker.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\xey\Desktop\Glock Clicker V2.0\svchost\obj\Release\svchost.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ