shenheCenter17[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

shenheCenter17.exe
Size

808KB
MD5

050efa439823cf2578b15a9ee617b03e
SHA1

8887d47a6e8526ad3090ce817896e9c95fced582
SHA256

08f2f80c5e364c7298af23973288d103884ce19f5d690d9bcb2f2ef545524273
SHA512

8ae5ebdf7a3530873e0e94d68ec88fa463eee4d7b8878287fa2ce6a71b322e566254f9d343ea9abee5de7e34ae49a49e90049a7d02499a9099622c58ee9151be
SSDEEP

12288:xD9AeXLeBD68vT3pyG2cidV4qYgY5mSJe:F9U1XTEIi8q5Y9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shenheCenter17.exe

Files

shenheCenter17.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 423KB - Virtual size: 423KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ