Static task
static1
Behavioral task
behavioral1
Sample
svhost.exe
Resource
win7-20230712-en
General
-
Target
svhost.exe
-
Size
10KB
-
MD5
c56d36f773341f78983f713afe9ab186
-
SHA1
45d2ce804b68c172d4c22cb16e01fd011cecf04d
-
SHA256
fe66f9f7ac759f7d5bca6de73b5fb94c478e3e1233db8f0bedd5adf93bd049d3
-
SHA512
58353e269c1ead254e7e041c30adc608a9554b7cc8e0ed813d023cfca2ac0cb90fecf8b0787bedf6f2486ce5b12ec7e80006696ba1189a4b806b3950c7e59135
-
SSDEEP
192:rwszS/69HwklEfuoOL6PKXt1sYQ8kWElhy0IjUNa8g49A19WP/Jp80O7klk:rf8dXWemsYQ8buh2xXORpNOr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource svhost.exe
Files
-
svhost.exe.exe windows x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
����t Size: - Virtual size: 160KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
����ta Size: 9KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE