svhost[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

svhost.exe
Size

500KB
MD5

9ca9b0f90fdec618ecf713e3d9fe6a0b
SHA1

fb4b0ac61146ae0deaa6d5f89d7ed7ffc5be54ad
SHA256

1870beadd5ae363d0f58b03d0107a42e4525ccf76f795240fab8757ca3680948
SHA512

c6452607e576ec62a8196e02758f8e1bf6232657bc61623c2b5a7282ca8ee7ac09c33b897f99dfed5e2b4c0dd948b784cd2f445a199ca0e54542bcc2ad8146b9
SSDEEP

6144:YRgnOOQ4JMbw8HO/F3PRP7tMME3jOjC8GyQFHEtHB/BzvE9tWAk3QksOh0:EGQ4Jws1PRPZMMEihgHIt6R

Score

N/A

Malware Config

Signatures

Files

svhost.exe
.exe windows x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 388KB - Virtual size: 388KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 494KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 914B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.symtab
Size: 512B - Virtual size: 4B

IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ