Power[.]JobServiceManager[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Power.JobServiceManager.exe
Size

259KB
MD5

7579a0e00d4b9860c3f2bcc94b94fd31
SHA1

0eb649e7e5e3b40503d0a1b9fa0ba857116f454a
SHA256

96a5db59b81152c69e9a4f2bd10556a4e971912dc5a3fd4f43b0d0d79cc0868a
SHA512

6f0db64e978648d9387cef1778682900befe85ce2b21f51c08a1f3ebdce614cee966126fc536c399a1bd3c3eeadb149d0dadfd5902504cfbe5707d16a0c30059
SSDEEP

3072:85E0I72pv4fMQSvn4Vw+p+UAJ2DdiWsMQSvn4Vw+p+UAb2idiA:85E0Iypwf4vkr5AJ4vkrOA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Power.JobServiceManager.exe

Files

Power.JobServiceManager.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\PowerM3\trunk\src\Power.Share\90.Tools\Power.JobServiceManager\obj\Debug\Power.JobServiceManager.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 158KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ