Client4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Client4.exe
Size

420KB
MD5

4121fd7a372250fbc4a8cfa0af5aab80
SHA1

638097b630522b1aea1167c193acde34edcb1f8c
SHA256

9596be646d99aadcd612c5cd873bd20acf882eafcab5a46a11759165f9b97c37
SHA512

0f3c1ef06807f624b815557eb3d41676309a5c63d33489e005f860d5eeff27b74173cb8f01e183c38c943d8ed7a8f89fc3cd3c2929c9903b06276548fe773887
SSDEEP

6144:0g6uS6HPGOxb1XLe6VlWT8b9XuHo+5tMcFinNbHEq5ouH0:0g9XvltPVle88H5Mc02qGuU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Client4.exe

Files

Client4.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 417KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ