Static task
static1
Behavioral task
behavioral1
Sample
RoE binder.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
RoE binder.exe
Resource
win10v2004-20220812-en
General
-
Target
RoE binder.exe
-
Size
433KB
-
MD5
0a10289662b02c6eae8bdc7d3078107c
-
SHA1
ff8397b2bdfdfd077893b38de331043f723e8cdd
-
SHA256
6e6255eaed54ebc210d0aa73292ff5830ee5a963f6972c370455a70cc44287d7
-
SHA512
e2bddad0b0c129333f7a23cf7d1136da0443d09fecb885706c39f22dd3c45c7e0617754b8254581c9b1b00f46bac412607aa40424497477f9d4888bfdaebc1c5
-
SSDEEP
12288:gKvW5tTJ38jaSz/yI+hQZ3R/l6OmwPYf7JmjN/DL6T/LleudnIUmIaK+apwvCrgu:s55SjK
Malware Config
Signatures
Files
-
RoE binder.exe.exe windows x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
j4+aGN Size: 87KB - Virtual size: 86KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 234KB - Virtual size: 233KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ