Service-Perms[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Service-Perms.exe
Size

11KB
MD5

c2ea34555efd2c2fc831b4b277165a3d
SHA1

8eed27c66d83b3e081ac3a098b1697fd13b709fe
SHA256

97142b82c1b907fb203c9fd128bc57949236191f9b3ec09621a6a1ae03b4779e
SHA512

bbad62846e4faaf3d95cbdc1985fb4288caa25d2fc2b49c56645453c4c05e0204c4786c1e3c9524ef2bb6dc297f0dc0f19dacf6fbce6870df73e082b35ddbbaa
SSDEEP

192:g6S+eg2jnKXy25KnW/a/8PUYd1S8WLEMURVy2i4+:g6S+ewKWS/7Yd1sLEMoo2i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Service-Perms.exe

Files

Service-Perms.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ