shepbind_serv[.]exe | Triage

Sharing

General

Target

shepbind_serv.exe
Size

8KB
MD5

62588f504060478c4ee40804a5a3fe65
SHA1

0a5a8c798e9f8ccca67e8b2cc300ef48da5010a4
SHA256

5cb62c7fd5a2ebaac4479dfc924506391959c52e480d9cbbbaecca2acf23cb32
SHA512

fb3f00c0772b98219803a4736216120874238a569b0ba5ffd15f498a7c831a3f5cde96fe4efa0e711a336b75908aaa21210adb470191e5b9e018edb639af530c
SSDEEP

96:J78iZY09jq0m7X3SLg6l1iocyawH7g+sYS2rCC2CA2rDHVRe1iazNt:uiZhuD7yE6fc4bgjv6vHVSj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
shepbind_serv.exe

Files

shepbind_serv.exe
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ