XBinderOutput[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XBinderOutput.exe
Size

7.1MB
MD5

0ee79176d0f7730785e1b5beb20ea151
SHA1

a140e1d3ae52391197b29ad5bf74192c2a180665
SHA256

cf71788461e3b227f35fe94e28cd30888150a63633af2a4693c934fc673c62d2
SHA512

e53448acdedc78f38185be4b24b364e937bd57c124a1793adbff6d1c3f16c4457915071488852dcfb3cbbf9880f8a5193e64c99dd0506c0b379e1c27dd61e030
SSDEEP

98304:oiBx9Wi2lEsS1K6uwySoHVLleGEjtkPEOn/WXhlyiulqfXJVvgjztyRyEIHJIgT3:zB6pleVtkhn/G9f4j0Rytjx+GmL4w2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XBinderOutput.exe

Files

XBinderOutput.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6.9MB - Virtual size: 6.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 166KB - Virtual size: 166KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ