XBinderOutput[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XBinderOutput.exe
Size

28.1MB
MD5

525bff27d04224666599f288f63bb1b5
SHA1

3130b6853d2bdf38a11a6b472625677581e36e0b
SHA256

75ef55b4e1398f5c3b6437131010fd056a93d3a8a0abaf19bf0c552f2432f415
SHA512

68a464756dafc6b6e9d5adde92c5a9bc27991e8b4f06e223e2942a7d3b9fd19692deb6f5c1beefbd677fb684c7832f7679070a58203e19659f7be7b2df69d878
SSDEEP

393216:hcZw20VcAhsPBBUUUtaFhNzL55kU7KLBzgQ/9byqkINwS72sbhSG15xnUcmrDO4L:h15cRPHUULFfzLnb7FW5k96vPirD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XBinderOutput.exe

Files

XBinderOutput.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 28.0MB - Virtual size: 28.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ