Clipper by Danij[.]bin | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Clipper by Danij.bin
Size

2.6MB
MD5

9268c786580a62f6aa4e20a16c48f672
SHA1

ebf1ec1a4fb78b2097383091789cd498a2eb5430
SHA256

bca5fa97fccd79e826a72468036407d6d6e5d0a069c2553f5c322fd72db7ad7e
SHA512

c6cad6fbdf15fa7e5a1c5abd1e45e967ab3d16a24240411892e1202d6524b15cddef2788d7c99e5170aa6540b4222016ee17028268a6dbf90a827a982fa8ee5b
SSDEEP

49152:D9/SQehjZZ+9NZmzmnpWjoGysuq+dEuh0OyIsBfoEUZe6pSMNQE+GWGNxMZ9e:5/xexL+9NZmzmoNydX0OyxBfoxfMMSBu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Clipper by Danij.bin

Files

Clipper by Danij.bin
.exe windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

sY~@\h
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ