Static task
static1
Behavioral task
behavioral1
Sample
svchost.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
svchost.exe
Resource
win10v2004-20231215-en
General
-
Target
svchost.exe
-
Size
44KB
-
MD5
449381c02c522f454019bcadcd5b8604
-
SHA1
6334148d76e2cd583bccab3d78dc413a9606dfe7
-
SHA256
4d1d988ea14df3aff68ecf91ebe82bb8eef3424fae789b956255404358c8f3a8
-
SHA512
c575de0525137cd3298f3b4ab2d338e92d1807c143b5be3dcc7171579f3c76f569eb6d01bb5547b74fd30f3c9286443dd6082eb70284975a1cd0d5457d061abb
-
SSDEEP
768:YmH/kfD9tu6cr6XDbvOp7Q19YRULQr9SXfuX85B6SB/vu/S5:YmHKD9dvOpxGsr9Iom/W/S5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource svchost.exe
Files
-
svchost.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ