dropper_cs_ps_pbind_v4[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

dropper_cs_ps_pbind_v4.exe
Size

17KB
MD5

5d9c5c199ccf86e870faf7611b9832e2
SHA1

75996708fcbaa84765c92969870f634073a1f313
SHA256

9180b226c69139134776682ccf37aef58007c6d3f5e8f49a45d25ee019a3377e
SHA512

f79c968d7500ac2206c4bdf7c360f8d83dce0d8fb92cbb69097274622f548c91714279850ea25ed92cae3a2d8d98ea91ce92b3d89317a280f3f024954a0e1b52
SSDEEP

384:xHHTshdxnxmH3wBpIhECN/QACwUGLefokj+Z92DmOrpx:FTc4vUs0SZJ4x

Score

1^/10

Malware Config

Signatures

Files

dropper_cs_ps_pbind_v4.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 800B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ