Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svchost.exe.dll
Resource
win10v2004-20240508-en
8 signatures
150 seconds
General
-
Target
svchost.exe.mui
-
Size
2KB
-
MD5
0d3e703884436c8f3b43b2d95699b8a0
-
SHA1
95e05eaa4e5858843b0de06b10e4dcff3f212b77
-
SHA256
628b2737ca3e54c1f222ea102c67f5e33326a1172b9396add98eb795ba27a353
-
SHA512
abf2c22181e7437cf3ac62d96484d07f6d6c7d077f097967e61602f087e60fa71fd1c1bd34b155ebbe63d5b3e48760bb3108783a23fe8f16934ee22ecef3af59
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource svchost.exe.mui
Files
-
svchost.exe.mui.dll windows:10 windows x86 arch:x86
Password: infected
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Sections
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ