svchost[.]exe | Triage™

General

Target
svchost.exe
Size 228KB
Sample221226-rdtxjada76
SHA256 e1c088749ae4df16e4e029ecbc02b57c1a3ad3a36a3c5f1dfb9fd30f163f39df
MD5 5bf69e555fe1e636d6c02c470bea0b6f
SHA1 96e30ea4c29b8eac021a17cc5cd056e269d9bfb0
SHA512 488caaca4b6b99de782d16a08ae8319b0c1a232a18bc2894d5e0c017af0764e1ffe4a32eb409d9cfde62f1e33b01306eb45bf285c9eaa653ca6d61c2f3b5edbd
SSDEEP 6144:ZbwPB/7O/FD4m+6I1/8Ni0u2VYOHT2C7u13ayTg:ZSOHT2C7uJVT
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

svchost.exe

.exe 228KB

svchost.exe

IMPHASH 73f351484ad7a55f96cc5c0d2d45a4d6
SHA256 e1c088749ae4df16e4e029ecbc02b57c1a3ad3a36a3c5f1dfb9fd30f163f39df
MD5 5bf69e555fe1e636d6c02c470bea0b6f
SHA1 96e30ea4c29b8eac021a17cc5cd056e269d9bfb0
SHA512 488caaca4b6b99de782d16a08ae8319b0c1a232a18bc2894d5e0c017af0764e1ffe4a32eb409d9cfde62f1e33b01306eb45bf285c9eaa653ca6d61c2f3b5edbd
SSDEEP 6144:ZbwPB/7O/FD4m+6I1/8Ni0u2VYOHT2C7u13ayTg:ZSOHT2C7uJVT
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

6976

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW

msvbvm60

__vbaVarTstGt __vbaStrI2 _CIcos _adj_fptan __vbaStrI4 __vbaVarMove __vbaVarVargNofree __vbaAryMove __vbaFreeVar __vbaLenBstr __vbaFreeVarList _adj_fdiv_m64 ord698 __vbaFreeObjList ord516 _adj_fprem1 __vbaResume __vbaStrCat ord660 __vbaRecDestruct __vbaSetSystemError __vbaNameFile __vbaHresultCheckObj ord557 _adj_fdiv_m32 __vbaAryDestruct __vbaVarIndexLoadRefLock __vbaLateMemSt __vbaForEachCollObj __vbaExitProc __vbaObjSet ord595 __vbaOnError __vbaCyAdd _adj_fdiv_m16i __vbaObjSetAddref _adj_fdivr_m16i __vbaBoolVarNull __vbaRefVarAry __vbaFpR8 _CIsin ord631 __vbaVargVarMove __vbaNextEachCollObj __vbaChkstk EVENT_SINK_AddRef __vbaGenerateBoundsError __vbaStrCmp __vbaCyI2 __vbaVarTstEq __vbaDateR8 __vbaI2I4 ord561 __vbaObjVar DllFunctionCall ord563 __vbaVarLateMemSt __vbaRedimPreserve __vbaLbound _adj_fpatan __vbaLateIdCallLd __vbaRedim EVENT_SINK_Release __vbaUI1I2 _CIsqrt __vbaObjIs EVENT_SINK_QueryInterface __vbaStrUI1 __vbaVarMul __vbaFpCmpCy __vbaUI1I4 __vbaExceptHandler ord712 __vbaDateStr _adj_fprem _adj_fdivr_m64 __vbaI2Str ord714 __vbaFPException __vbaStrVarVal __vbaUbound __vbaVarCat __vbaCheckType ord535 __vbaI2Var ord644 _CIlog __vbaErrorOverflow __vbaVarLateMemCallLdRf __vbaVar2Vec __vbaNew2 _adj_fdiv_m32i _adj_fdivr_m32i __vbaStrCopy __vbaI4Str ord681 __vbaFreeStrList _adj_fdivr_m32 __vbaPowerR8 __vbaR8Var _adj_fdiv_r ord685 ord100 __vbaI4Var __vbaVarCmpEq __vbaLateMemCall __vbaVarAdd __vbaAryLock __vbaFreeVarg __vbaVarDup __vbaAryVarVarg __vbaVarLateMemCallLd __vbaVarCopy __vbaFpI4 __vbaLateMemCallLd __vbaVarSetObjAddref _CIatan __vbaCastObj __vbaUI1Str __vbaStrMove _allmul _CItan __vbaAryUnlock _CIexp __vbaFreeObj __vbaI4ErrVar __vbaFreeStr

Sharing