FixServices[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

FixServices.exe
Size

48KB
MD5

25d45825c2412b65c7831bdf21c4aa76
SHA1

bc3b6140e0266d67b9d6abf20522c6cf1f5e8a92
SHA256

42b1e6920266f18cf0fd49db15a79379d205445bbd362004dd171954f627f2a5
SHA512

b2a172eeb91f8513373643b270c761ad8ae0a82315faed3519b0a6ae68cb136b1c9fc761513e9779608e0b740ac616ec0b84ba72dbdc4573503116418495798a
SSDEEP

384:FdM7f5FSHIsjGPMALaAeaKmV2xLW45tsfrwi8XlmSSmVAIxb1cpm0kpTLv97:A7jSoyGkAmArKpljAIxyVQLF7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FixServices.exe

Files

FixServices.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\Documents\Visual Studio 2005\Projects\FixServices\FixServices\obj\x86\Release\FixServices.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 4KB - Virtual size: 169B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ