Client-built[.]exe | Triage

Sharing

General

Target

Client-built.exe
Size

505KB
MD5

2ccdccf6c147006da0230d8fdaea2f84
SHA1

ccdf21a6ceae06747523d3edf9684688fea0d504
SHA256

e40833934923e8135542bd32f4154e88baf072f811ae9363b0be3245569467e8
SHA512

39b81e5eada84f5a8bac52059f0f666100d405c9cd6c840da6c21925c67c10b2c3dbf8d2a40c7cc5a802e4060a10fca34dc32a8d096af79c739544dc7ab5cbbc
SSDEEP

6144:vNyVCNAEl137QnlX5XVbS8DS5zk2zHxqebKh3Sfa4bPkyhFAToV:16lE/7Qnlx48DTUxqqKNSfa4bPkysoV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client-built.exe

Files

Client-built.exe
.exe windows:4 windows x86 arch:x86

Password: 1234

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 222KB - Virtual size: 222KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ