CMSService[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

CMSService.exe
Size

121KB
MD5

edadfed31fc8e8b26b4780b0619ffdfd
SHA1

8e8b4fb2e2fff8ba36ea033d4b90d5f1a7bfea45
SHA256

5c17d34db94e414baa541bb3356ba3576a0a74b3b3f9567cef03d97cd261ab05
SHA512

6b0c87b4ff3f0673d76cf5402657ea7c5c95227ef7283eedb27034cdee212c8b1f6e3dfdcbd6d9c7bb332adbd6ec4c1306b236d9e805598b321bed72675494b9
SSDEEP

3072:swxmDETe47eDWeDPeD93iWVTSpGdSXV7Lc3csflqhX:/t3TzeVUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CMSService.exe

Files

CMSService.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ