ZhongHong[.]exe | Triage

Sharing

General

Target

ZhongHong.exe
Size

1.2MB
MD5

8116cdc5bd62367d70e0a85714a8c507
SHA1

0f9d7b53d803a04812ced403e3b9736b36a48886
SHA256

dd26220b9073ca911c9b747476c60a9f9c8c9457d839e4774f4dbd9f3a3ab7b1
SHA512

d68271c14d15f9f7c822a191a542b62f47975b592f343293756901bdef36aa44180a84a4da54be98880e4f73fc411e7b0cb533631e27d0cd9b4ef600ef62d31a
SSDEEP

24576:pSNkyeHjCt3m+SnrGOFy6CnTXppelqPC3QxT4:p0kyCCtFSnyOgbnTDCqPCAxT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ZhongHong.exe

Files

ZhongHong.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ