cli[.]exe | Triage™

General

Target
cli.exe
Size 742KB
Sample261102-tc6wtabs8y
SHA256 c434ce8620057d9dd9073b4af8382bf27e85729d152164909f1052775e7ddc70
MD5 e18a0f07a55738e880b46d4a22deca5d
SHA1 e73ee451f2e97e0802b2ab00115539ecf24fd76d
SHA512 6fd3fe5e1db110d3af055919f9935fa4e6cdbc6e46c0cdb2fbd4779d8e8328338788fe28e11201172f609a03cbd5468b48a35bef6559739c52c0cfdb1d54de17
SSDEEP 12288:qFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:qFs4FZnKsrLdiCUMs/KiesyYA
TLSH
T1DCF4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cli.exe

File Explorer

cli.exe

.exe 742KB

cli.exe

SHA256 c434ce8620057d9dd9073b4af8382bf27e85729d152164909f1052775e7ddc70
MD5 e18a0f07a55738e880b46d4a22deca5d
SHA1 e73ee451f2e97e0802b2ab00115539ecf24fd76d
SHA512 6fd3fe5e1db110d3af055919f9935fa4e6cdbc6e46c0cdb2fbd4779d8e8328338788fe28e11201172f609a03cbd5468b48a35bef6559739c52c0cfdb1d54de17
SSDEEP 12288:qFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:qFs4FZnKsrLdiCUMs/KiesyYA
TLSH
T1DCF4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

383313

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\a\defold\defold\share\ext\luajit\tmp_win32\LuaJIT-3e223cb8a41cff3b92931acb846af7b67a5d2537\src\luajit.pdb

__swprintf_l __vswprintf_l _fprintf_l _fprintf_p _fprintf_p_l _fprintf_s_l _fscanf_l _fscanf_s_l _fwprintf_l _fwprintf_p _fwprintf_p_l _fwprintf_s_l _fwscanf_l _fwscanf_s_l _printf_l _printf_p _printf_p_l _printf_s_l _scanf_l _scanf_s_l _scprintf _scprintf_l _scprintf_p _scprintf_p_l _scwprintf _scwprintf_l _scwprintf_p _scwprintf_p_l _snprintf _snprintf_c _snprintf_c_l _snprintf_l _snprintf_s _snprintf_s_l _snscanf _snscanf_l _snscanf_s _snscanf_s_l _snwprintf _snwprintf_l _snwprintf_s _snwprintf_s_l _snwscanf _snwscanf_l _snwscanf_s _snwscanf_s_l _sprintf_l _sprintf_p _sprintf_p_l _sprintf_s_l _sscanf_l _sscanf_s_l _swprintf _swprintf_c _swprintf_c_l _swprintf_l _swprintf_p _swprintf_p_l _swprintf_s_l _swscanf_l _swscanf_s_l _vfprintf_l _vfprintf_p _vfprintf_p_l _vfprintf_s_l _vfscanf_l _vfscanf_s_l _vfwprintf_l _vfwprintf_p _vfwprintf_p_l _vfwprintf_s_l _vfwscanf_l _vfwscanf_s_l _vprintf_l _vprintf_p _vprintf_p_l _vprintf_s_l _vscanf_l _vscanf_s_l _vscprintf _vscprintf_l _vscprintf_p _vscprintf_p_l _vscwprintf _vscwprintf_l _vscwprintf_p _vscwprintf_p_l _vsnprintf _vsnprintf_c _vsnprintf_c_l _vsnprintf_l _vsnprintf_s _vsnprintf_s_l _vsnwprintf _vsnwprintf_l _vsnwprintf_s _vsnwprintf_s_l _vsnwscanf_l _vsnwscanf_s_l _vsprintf_l _vsprintf_p _vsprintf_p_l _vsprintf_s_l _vsscanf_l _vsscanf_s_l _vswprintf _vswprintf_c _vswprintf_c_l _vswprintf_l _vswprintf_p _vswprintf_p_l _vswprintf_s_l _vswscanf_l _vswscanf_s_l _vwprintf_l _vwprintf_p _vwprintf_p_l _vwprintf_s_l _vwscanf_l _vwscanf_s_l _wprintf_l _wprintf_p _wprintf_p_l _wprintf_s_l _wscanf_l _wscanf_s_l fprintf fprintf_s fscanf fscanf_s fwprintf fwprintf_s fwscanf fwscanf_s printf printf_s scanf scanf_s snprintf sprintf sprintf_s sscanf sscanf_s swprintf swprintf_s swscanf swscanf_s vfprintf vfprintf_s vfscanf vfscanf_s vfwprintf vfwprintf_s vfwscanf vfwscanf_s vprintf vprintf_s vscanf vscanf_s vsnprintf vsnprintf_s vsprintf vsprintf_s vsscanf vsscanf_s vswprintf vswprintf_s vswscanf vswscanf_s vwprintf vwprintf_s vwscanf vwscanf_s wprintf wprintf_s wscanf wscanf_s

Sharing

General

Malware Config

Signatures

File Explorer

cli.exe

generic