WinLogoUI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

WinLogoUI.exe
Size

785KB
MD5

716d80f3af4c2b950f498a242dd2cfa5
SHA1

c440510c73306fbb468bcf7a0d3f2cbbc7051b3b
SHA256

251c23a30616890ff013b493014d633c2e16c415be91fe382444472ae3d53ada
SHA512

4d81a949dec4b2906bf775b9e1aed2c4b104ed305a1c68d9491590916e10e5784574a122324ed5e028bd71afd3f15c1c1ff60ad7a5914df344afe6070ab1924b
SSDEEP

12288:DQj8xqRTDd2m2Ke1PNL+QRfBg/f/EWFDQ8xY4:0AxqR10PNCKBg/f/dxY4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WinLogoUI.exe

Files

WinLogoUI.exe
.exe windows:4 windows x64 arch:x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Shachaf\Source\Repos\WinLogo\WinLogoUI\obj\Release\WinLogoUI.pdb

Sections

.text
Size: 673KB - Virtual size: 672KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ