svchost_x86[.]exe | Triage

Sharing

General

Target

svchost_x86.exe
Size

95KB
MD5

5da3c8b661c5eff967ae2265d61f9307
SHA1

15dcadd14bfe1792daeab176491028acf36a2059
SHA256

28ff53e5d7e579878ff579ade0190f4e645b72c60b9dbde2a607c26e11e83ea4
SHA512

039b84b3cc90557c25ee048fbdec03d8ecf1245a9c3216f0ae69279305d4ef0f534b1b2f3f3f99f5a00ec559d4592c9d450f761c99465b73d0253f8be8262dc9
SSDEEP

1536:rVLExmXlMluYnwmwYZNvOR2hcBBNxYE6n5MWuYnSzxT/FNgDGC/dLF0:rNE0VMlNZH8wcxngSWuCSz9/8DGC/dLy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
svchost_x86.exe

Files

svchost_x86.exe
.exe windows:4 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 54B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ