ServiceHub[.]VSDetouredService[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ServiceHub.VSDetouredService.exe
Size

218KB
MD5

0a376a420a54e59a4eac8a605057c2d6
SHA1

e7dd428dc67e35394c2cfad0c9a2167e1f1528bd
SHA256

87daadd5352ce583b0efc75a7030520b61f4b50c32ac6da1bc0a1f5fb1c4411c
SHA512

ed10422ef1b7879da5f4459e8def2c0b75c062e7222f11dd08676ef1d2eb63ee5a60a1b2b79cf691949f9aea2537265f0aeb9aabf50c12d375768fb5d445a8d6
SSDEEP

6144:6S5B9PpY3DY7L8MAIPvdXc/RHhGTpKD8dPYQy:5dLNds/RHhGTpKD8dPYQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ServiceHub.VSDetouredService.exe

Files

ServiceHub.VSDetouredService.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ