Static task
static1
Behavioral task
behavioral1
Sample
shenheCenter22.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
shenheCenter22.exe
Resource
win10v2004-20230220-en
General
-
Target
shenheCenter22.exe
-
Size
863KB
-
MD5
5b02b1f4e0155019726937b41497ddc5
-
SHA1
a85908b71ee1dc5aca817eaaa86ce03f47c84d3f
-
SHA256
99331cedadf1cdc6f928b0c119d9db642f6d4562b50607c63712e12d883a444a
-
SHA512
766d923d3e8b286abb09c402bd63e41ed8f766026e6269ec3a617e0ba2a91784359b906128034ca592516552c9063de63be609ff04220b53dbdd1380aad79310
-
SSDEEP
12288:fD9AeXLeBDetJdLqmFd3UMJvxWYRtsAQWMBbB6l:L9U1KJJq+h34
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource shenheCenter22.exe
Files
-
shenheCenter22.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 395KB - Virtual size: 394KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 457KB - Virtual size: 457KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ