isoHost[.]exe | Triage

Sharing

General

Target

isoHost.exe
Size

988KB
MD5

02a3420fffc0285ca90ab96cbe234d75
SHA1

4af27ddf735258ca202cf2b56b9f3560c4573dc1
SHA256

65fac76f4e603b4f0142ee6e2ca0f950a5b927487040612f76368d9321d280ba
SHA512

090074ff5e1040e9f8295b3fe80b7fe0712280c4658ff902e77635b55c38eb20a44200663b18a4d479c328a968bebc98ef8284ac36b986051f627f8a46205050
SSDEEP

12288:zSpoMC+zMBYyMHMIMSMsjYoxWbJjDvBeas4hq3rXa4PoP7afpWvLzoh8cXFeb/dO:zSylCe9qhJtYtvSMmaeoPO0vnW83d4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
isoHost.exe

Files

isoHost.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 986KB - Virtual size: 985KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ