bindend[.]vmp[.]exe | Triage

Sharing

General

Target

bindend.vmp.exe
Size

17.3MB
MD5

0a87d69526ae8ec1dd4144073d3f2725
SHA1

dc187a008902758cd7680142908cf4ff6bd598a6
SHA256

fdb54e439423c815fb0870bb7a38b0706b16949f9a66672f6b3aa803dadd2e72
SHA512

ab38e88541710523137b7ebb64706174cbffe0bdb8f293bc8b07b124a4d456556c79d5a61d49fe5a4b2ad31fad891f8a899af3ca2565b27c372feba54e5afc1b
SSDEEP

393216:KgLmYtWt2Nz9VKd5aDZzkslB1SAiSpCZ1hhv1XFM0N4wXA:DveQ765Kzb5SXZ1f8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bindend.vmp.exe

Files

bindend.vmp.exe
.exe windows x86

e70d6f246b1d521ea7f531d495d5c541

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

shell32

ShellExecuteA

msvcrt

__argc

kernel32

SetUnhandledExceptionFilter
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 688B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.|PW
Size: - Virtual size: 9.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.-mT
Size: 1024B - Virtual size: 896B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Nl}
Size: 17.3MB - Virtual size: 17.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 739B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ