shenheCenter20[.]exe | Triage

Sharing

General

Target

shenheCenter20.exe
Size

810KB
MD5

5d8c0b9013b6262dd533c8f9340161b5
SHA1

de4137e3f8fd5f1b5fc494ac64c957553654d92d
SHA256

83c0635c5063a6a6081c58073ae426f7927048e174f119e7a22baa4bcbc02228
SHA512

70a20b4eb20dae01a30ae4af3acd2b9ad1c85790964dd0d8ed2785b2a968989a5d1b565f89c2b7970aec9864cd98bef5834ce4b712614eb83e9c1d5303b684d1
SSDEEP

6144:a9D9/Wx3uNXLEVCslSP4VDMV6rO3gaPixQZfmSn0E6WF6vTnu//JwaJRlKcv/p5G:ID9AeXLeBDVDG3gk9QvTumaZKcdPjNmn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shenheCenter20.exe

Files

shenheCenter20.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 374KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ