SinourPhoneService[.]exe | Triage

Sharing

General

Target

SinourPhoneService.exe
Size

1.1MB
MD5

1c25a2243e04557651bcc99a1a0a6214
SHA1

1f73fa98bd19873e7c81da6a63ca8cece9b5df67
SHA256

ceea1f3437e52eb832508335ff9f90a2ec02afa4f76916f63b17e56f2e893be8
SHA512

49015ebcf6837fd0d9a20ebf2d2b6c9f9dc305c5146915d4c31e30280505abd9547dc855fa840f66ba697d348d032a4adfb5f9c70353e894ace46ee2bef2897b
SSDEEP

24576:fS7q1+xiaa5zU7oHHd+rRwshjwshnwsh:fS7q1z5zUEHHd+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SinourPhoneService.exe

Files

SinourPhoneService.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ