ShinoBOT[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ShinoBOT.exe
Size

32KB
MD5

11740ab287bae7ecf25ee53d8eb4d836
SHA1

f68295ab09d89bfef0962fd3e3951026aeb617c3
SHA256

621c461b9e654e148534609f67dcede31ceeed3a715d1676bef4ad5c86a819be
SHA512

e76de3f843bce2d2c9b8a38379eb05101b7b53d39484e8950eb8078470bab0c68c2e79f8a66967ff58fb7bb3a2e85e63cec0ec266b937548c600f9f8fdf7da30
SSDEEP

768:nRH/ChBivNuylep2XClxc86l3uAeihzpY:nRfCwiGmuNl3qih2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ShinoBOT.exe

Files

ShinoBOT.exe
.exe windows x86

Password: infected

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ