XClient[.]exe | Triage™

General

Target
XClient.exe
Size 337KB
Sample260706-a3fyjagy6y
SHA256 20c9e31467449ec5c2b9c37e42eb8d23d74c1a14daa62338cf0f66ff24ba5ba4
MD5 1ea5952e2c664fda1d1115d3cb8f9812
SHA1 c0a840f970275caacc053f36afe6153572038f24
SHA512 3f7e229ea048d518b4c9e22595e8058995252572c95f7d6d390fd050967f1df1940a7c9fa46332ac96289cabe6127aafc985b03759d99f37c05c8c23a23ffbfe
SSDEEP 6144:YnBllllltlZlZllllllKllllDllllllllGlllllllllllllllllElfll9Bl0lllu:YnBllllltlZlZllllllKllllDllllllX
TLSH
T172749FAD024C4439D23F31B29F592180E7BCC866466A16DC2BD47D3EE52962D31AB3F7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XClient.exe

IMPHASH 86b20084742a76f095688337078e4d75
SHA256 20c9e31467449ec5c2b9c37e42eb8d23d74c1a14daa62338cf0f66ff24ba5ba4
MD5 1ea5952e2c664fda1d1115d3cb8f9812
SHA1 c0a840f970275caacc053f36afe6153572038f24
SHA512 3f7e229ea048d518b4c9e22595e8058995252572c95f7d6d390fd050967f1df1940a7c9fa46332ac96289cabe6127aafc985b03759d99f37c05c8c23a23ffbfe
SSDEEP 6144:YnBllllltlZlZllllllKllllDllllllllGlllllllllllllllllElfll9Bl0lllu:YnBllllltlZlZllllllKllllDllllllX
TLSH
T172749FAD024C4439D23F31B29F592180E7BCC866466A16DC2BD47D3EE52962D31AB3F7
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

1

Entry point

8192

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths