PRE-ALERT SKLZ212352 SHANGHAI[.]exe | Triage

Sharing

General

Target

PRE-ALERT SKLZ212352 SHANGHAI.exe
Size

713KB
MD5

552ee990f830766f6927efcbc5f9b0d0
SHA1

4f37411d05c5c82d89f1b3369c020ad016f11549
SHA256

337d449fb4debc0bd9f6862e065d8876d53f0a7d10c72cf56c9c5905daf45e9f
SHA512

53c7987594de5309a56d439af598e444dad26b63877a6e7bfbf9a827b7a064a4db9bdcb397631b378a27616a067b4c8f6463c3acae142d6f5ce0338020f7e737
SSDEEP

12288:vKEP/SJaVyR71/oy3YTMoIi4zTIVhGzZ03aDGs8fGmM:x/453DCMc4z0V0QaDGs0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PRE-ALERT SKLZ212352 SHANGHAI.exe

Files

PRE-ALERT SKLZ212352 SHANGHAI.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 703KB - Virtual size: 703KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ