Static task
static1
Behavioral task
behavioral1
Sample
sihost.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
sihost.exe
Resource
win10v2004-20240802-en
General
-
Target
sihost.exe
-
Size
47KB
-
MD5
ddfa99c0629fae91dc5aa17e45a2a8bd
-
SHA1
53abd5f26f2ac7d1fb93bd9d57797fba01341586
-
SHA256
54fe6edf9984389e95e425706b85706ea2fc6e8f51631e89eec2df36c5636025
-
SHA512
770f9847ffc43918671fa29b55ca061e17cde564541a07c3f55c5ecfb28629d73ed94c8b49f43a77ea17ed43e09f7cb22690db9b124b1698d71e34c265a3c6eb
-
SSDEEP
768:6jpwvigowz21xEHUTZhfff8gkOzrGm/06a5bQBvzigDcXSxm91fwZYBxkr:spd1FEHWf38gXr7/06CbuDgXSxm9xwao
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sihost.exe
Files
-
sihost.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ