spot_bin[.]exe | Triage

Sharing

General

Target

spot_bin.exe
Size

55KB
MD5

3921d9ae4d5f8c743db4370651cd6d90
SHA1

59afda91a16a5ef66b078a34ccd95b65d2d82d38
SHA256

3df1fb8d7c9c69488443598445e74ad315ad54b026d593d5ec2dec90a0091f17
SHA512

3bd2dd5fcfc36179151934fb36edb05d725665eb60d4f933184509b00468097001c1db7fde0ef9bfbc2dca1eeb21f1b3fbb6636489097ce7dca71f3650d83cc1
SSDEEP

1536:R+k8NqjELGv5+mvcFnj/bOWG7686ab2OMSO:TNSFj/bOWFDOMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
spot_bin.exe

Files

spot_bin.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ