c:\Documents and Settings\rajasekharanv\My Documents\Ranju\Vc++\Other Stuff\Binder\BinderBin\Release\BinderBin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cabfdc29ee231aed134b2a90f8beb343.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
cabfdc29ee231aed134b2a90f8beb343.exe
Resource
win10v2004-20240226-en
General
-
Target
cabfdc29ee231aed134b2a90f8beb343
-
Size
668KB
-
MD5
cabfdc29ee231aed134b2a90f8beb343
-
SHA1
bdc155a837900e40c17be61c4a47e46da929aaab
-
SHA256
0f0f1d824752675455889e593d6fc792fa2d5f980f06965320fa11e4c53201a2
-
SHA512
c733ebe372e02087da44865cb8451c247b3114b95bb54467ea1a5d53611b3368cd6b33707221a19c73df083775bc45407d3e0069c36675d7f0aba6e88cc9e0da
-
SSDEEP
12288:9+qrT7cPuKU4M6dAAsuGU2T/+xrWeFzLg0rNMk++AGlkxQ4M0:9++T7GuUMOAAr0+x6MMkyGKxG0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cabfdc29ee231aed134b2a90f8beb343
Files
-
cabfdc29ee231aed134b2a90f8beb343.exe windows:4 windows x86 arch:x86
665e25915ebf5aa803831b216fa2f700
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
MultiByteToWideChar
WideCharToMultiByte
RaiseException
GetLastError
InitializeCriticalSection
DeleteCriticalSection
CreateDirectoryA
CopyFileA
DeleteFileA
GetSystemDirectoryA
GetTempPathA
LockResource
LoadResource
SizeofResource
FindResourceA
ReadFile
SetEndOfFile
GetLocaleInfoW
GetOEMCP
CreateFileA
SetFilePointer
FlushFileBuffers
SetStdHandle
LoadLibraryA
IsBadCodePtr
IsBadReadPtr
HeapAlloc
HeapFree
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
RtlUnwind
ExitProcess
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
HeapReAlloc
LCMapStringA
LCMapStringW
GetCPInfo
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetProcAddress
TerminateProcess
GetCurrentProcess
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetModuleFileNameA
SetUnhandledExceptionFilter
CloseHandle
WriteFile
HeapSize
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
shell32
ShellExecuteA
SHGetFolderPathA
shlwapi
PathFileExistsA
PathCombineA
PathAppendA
Sections
.text Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 592KB - Virtual size: 590KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ