ServiceHub[.]DataWarehouseHost[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ServiceHub.DataWarehouseHost.exe
Size

16KB
MD5

e29c5666447fda9fa360300dd7af6cfc
SHA1

0fbaf205f3854ae4fd94a12e8aabb0bfa47dfd1a
SHA256

47750e5910fb8bef74081f3129773d0640231d243d9a68d6c2639db6044604d5
SHA512

323607faa0ece001a09c8b4491148c3b6c1ae4e821bd15465f057c0a663517bcacf1c707749b7879654c0afbce50beb4041bca34feb5ca51a9a1e744bb19b8d1
SSDEEP

192:xzOWJ/kxG56cppgWlqSstbzxeWULwu0Sc2HnhWgN7acWZvhoHiSqnajlVRBS:xzOA/yGAckWlqSstzuD/HRN7XzltBS

Score

1^/10

Malware Config

Signatures

Files

ServiceHub.DataWarehouseHost.exe
.exe windows:4 windows x64 arch:x64

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

Issuer

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

15-12-2020 21:31

Not After

02-12-2021 21:31

Subject

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Extended Key Usages

ExtKeyUsageCodeSigning

61:0e:90:d2:00:00:00:00:00:03
Certificate

Issuer

CN=Microsoft Root Certificate Authority 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Not Before

08-07-2011 20:59

Not After

08-07-2026 21:09

Subject

CN=Microsoft Code Signing PCA 2011,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Key Usages

KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign

d5:59:33:2a:ab:80:d4:5c:b3:73:d5:48:d2:1b:94:bd:6d:53:81:da:b5:5d:6c:8e:49:2c:77:54:67:3f:dd:c5
Signer

Actual PE Digest

d5:59:33:2a:ab:80:d4:5c:b3:73:d5:48:d2:1b:94:bd:6d:53:81:da:b5:5d:6c:8e:49:2c:77:54:67:3f:dd:c5

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\_work\1\s\obj\ServiceHub.Host.CLR.x64\Release\net472\ServiceHub.Host.CLR.x64.pdb

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Code Sign

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:dfCertificate

Extended Key Usages

61:0e:90:d2:00:00:00:00:00:03Certificate

Key Usages

d5:59:33:2a:ab:80:d4:5c:b3:73:d5:48:d2:1b:94:bd:6d:53:81:da:b5:5d:6c:8e:49:2c:77:54:67:3f:dd:c5Signer

Headers

DLL Characteristics

File Characteristics

PDB Paths

Sections

.text Size: 4KB - Virtual size: 4KB

.rsrc Size: 2KB - Virtual size: 2KB

33:00:00:01:df:6b:f0:2e:92:a7:4a:b4:d0:00:00:00:00:01:df
Certificate

61:0e:90:d2:00:00:00:00:00:03
Certificate

d5:59:33:2a:ab:80:d4:5c:b3:73:d5:48:d2:1b:94:bd:6d:53:81:da:b5:5d:6c:8e:49:2c:77:54:67:3f:dd:c5
Signer

.text
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 2KB - Virtual size: 2KB