WindowCenteringHelper-PE[.]exe | Triage

Sharing

General

Target

WindowCenteringHelper-PE.exe
Size

1.3MB
MD5

a730d2d86ded709c737c3a45204fe549
SHA1

968ab1fc371eba99e3548e165c379eeb84c09a12
SHA256

ffd6d5559aa58c146fa5cdd49de3de9a75616baa93d503ce91f96605be5b567d
SHA512

931c906bba98555593f73f5339381d612eba63ae66511d8a488cc3dbeba721d2a87dd0cff2c2940f7e5752338ca2c44260f9df2f8360352e1ba2e7823e4817ff
SSDEEP

24576:e6brvAQx+/3qlrCNoh+UagIwhCNoh+JR9FrIJJpCNoh+7jXwzKu4/:e5/iJO2URoGjgzE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowCenteringHelper-PE.exe

Files

WindowCenteringHelper-PE.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ