Client_xyeta[.]exe | Triage

Sharing

General

Target

Client_xyeta.exe
Size

511KB
MD5

dfc697632358021370a86cdf831bbce8
SHA1

135fbfa0e8e5386242d6f65f400e945f365afb68
SHA256

281f63fd4705ba1f407a06b5abe6a569045b2c5d118c573ad03c0ddf8e29d97f
SHA512

dfcefce8376e1117ce133c1b95a766117115dba996f80debe06b668a9b7b03fe1d00e341b89c8077d05a6b443e2426d12498ea6713c6662f2620a3865b7d9ea5
SSDEEP

6144:LYQHzjoW4S7AhHRkvUAPHBvMrEUH2V2GYuSRvWwLe5SaEtkqOD0kbrX9coNNMVZd:LY+YxiPhi2Vs1zmEt5ubziofHLYzNo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client_xyeta.exe

Files

Client_xyeta.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 508KB - Virtual size: 508KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ