Static task
static1
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win7-20230703-en
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win10-20230703-en
General
-
Target
svchost.exe
-
Size
49KB
-
MD5
97ba1b4c685b37276bc8b1ec4496017c
-
SHA1
12f0b5ebcb524e1255f0cb7671bd8fb02bba58dd
-
SHA256
a3b059dde8d561e3072f39ef7607379fc2ffe015b45753186f8a7bf8de7d1146
-
SHA512
3253e96aacd6372a82eba1c40d5396d8196c74b52c856eeb45fa1097b851cea2c41f54c624e80b056f256da10475f26c807392d71fc0b913372eacbf251f7253
-
SSDEEP
768:wTVcOc9XM8ILRZxt9/0iyywpMBXnlLCkqOpdns9rAdVcVoVj/QVO/QV+Vn6/:6KXMNEMVlLldnEAzZV0VHV+Vn6/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource svchost.exe
Files
-
svchost.exe.exe windows x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 47KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ