Shock Labs File Binder v1[.]0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Shock Labs File Binder v1.0.exe
Size

511KB
MD5

b865767be273a4b1576aa331341d8d70
SHA1

dfe05304d4ae10098da13b39f7b8f38dd2fbad4a
SHA256

e755b7cb542126f83c0647205a21a98f9c90265e68307f6a5ab2f26671a6c01d
SHA512

6ade746e9945a28cceb1c4e2a6f1aa833c86fe3e5c77ecc28c6983e72819d9d5617cc492930f86224364063548972f723d66ea8b44c5928475f79c41e2cd63bc
SSDEEP

6144:MXXLYAY5yi349qHxr5WtEaDpZsIkkWzwLqONx1XXLYAY5yi349qHxr5WtEaDpZsn:xj3MqdmZTWzwLqPj3MqdmZTWzwLq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Shock Labs File Binder v1.0.exe

Files

Shock Labs File Binder v1.0.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ