XBinderOutput[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

XBinderOutput.exe
Size

247KB
MD5

a115adfe7f92d15ad22f9960c739c9a3
SHA1

d9136914ee42afdb416e253ee09e1d7ca4a5dea5
SHA256

dddc1a87e63fe4c59f05ad7c12194fd581708fbf0810b6a396f22b27bf64a066
SHA512

cb9a3f2b09f6f6c675c3950356f153fba8f8f53bc5be3a33e251d45bb19f55a7152c40668199cad25a426cefcf58f3b92094fe413ec9f96f61e409fcc6d7bac8
SSDEEP

3072:qmt21aTCLGqW7fACUF2siLZoKpiIpkLdR8QlYZQl4N9+ZzsxaZQgBS6WPX36ekNu:q1YTCNEcK9AukLdPy/wZOfPXKe8US1L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
XBinderOutput.exe

Files

XBinderOutput.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 245KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ