svchost[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

svchost.bin
Size

318KB
MD5

c928fd6f71b3d7f1c040ebbb299949e7
SHA1

fb4815c9334b89e8e336aab853c56cf6b0785244
SHA256

a83166f370686185f2b4d47a53e3994a46946a0594f2c77f1aff5b5f9bc17878
SHA512

750175312c294090f5447000baa9100f8eed4bfda0e08cf4a1375c1ff7f50552b697c8ae7f0d6c113ab7b245112abf0bff5771fc9c95cbc976611c9891e2e8c7
SSDEEP

3072:Reh/P44OgIauZLPLX6E4RSi1x1gBnFq3f9HgmIyNr6VoK140P4YDebH0hLNn:RWCauZDFi1x+RMP9HgIr6sM6UT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
svchost.bin

Files

svchost.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 265KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ