ReshadeForUWP[.]exe | Triage

Sharing

General

Target

ReshadeForUWP.exe
Size

891KB
MD5

54a38f5c18c000092086e082f66337b1
SHA1

af0e5bf925e74853b4bab8a00670cf420d8f503f
SHA256

4156e3fba4a2f7e993620e363a78df371baa15e11f953fe6c93f2b97426d4424
SHA512

7e1b07b57c90c0f5012e2ceeaa449d8bfc24b27a44ee1d61d8df8b6bfeeeb63c768c3269bfb719f884596e4247ac51a27fb0cb3ae5d6fea8a50d811d6d7a7090
SSDEEP

12288:AdF/JkVhpb46hnSMS8pyn+6p944tyGeE0sYr/N85CYtPVGBhJwvIoaj/5Dk:IFRkzpk6hSEAn+I4bEpw/N85nNcL5tD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ReshadeForUWP.exe

Files

ReshadeForUWP.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 885KB - Virtual size: 884KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ