Static task
static1
Behavioral task
behavioral1
Sample
XBinderOutput (2).exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
XBinderOutput (2).exe
Resource
win10v2004-20240412-en
General
-
Target
XBinderOutput (2).exe
-
Size
48.4MB
-
MD5
3ae8c2ae68eb41fb9533e0ffca1c554b
-
SHA1
637f35d51bb62ac170065c98ddce78a26f68e37a
-
SHA256
196289002de9a1bd1c19b42dd5d973246c7a5a85f057e1ec5ff127eed045dfd9
-
SHA512
2048ce95a7ad99de9c32ec5c1de5ac91f83a8179fbd0c131b5889d44a7c9b39a16cd2e436db32e0197464a500398a3ed12897eb2030c3ecbb52524b4f3e3124c
-
SSDEEP
1572864:sr72CqaruqP6IC7ZPmSfbtcpvH6cV0dh9kfsr:SJFuqadmwcKdh5r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XBinderOutput (2).exe
Files
-
XBinderOutput (2).exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 48.4MB - Virtual size: 48.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ