Static task
static1
Behavioral task
behavioral1
Sample
XBinderOutput.exe
Resource
win10v2004-20240709-en
General
-
Target
XBinderOutput.exe
-
Size
40KB
-
MD5
cffbaf401314c2262dfe5d8ef1ecb247
-
SHA1
c2e0df7b0aab62c6c30c99c1475c3fc614916e44
-
SHA256
574fa576b4f049689692ff4c127df07c50bf624abbcac5f0f1189e062c411c28
-
SHA512
fbcf446aa79b54d3e391217e6af1ff87a678c029187e2bf2ee13bdc67e766bafb4a1987d8c39c02f6bec18d67087fc6d362919d5f432a0c025df5029ecea4747
-
SSDEEP
384:HUEKL5jC8YWPk+FMzo9bxd6zaIUQ+0cv/C4GhbKFUs9VA1jz6jOJt8/5PO4u3La8:cM8dum/IUGglGKFUssPsOU9K9iLsyA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource XBinderOutput.exe
Files
-
XBinderOutput.exe.exe windows:4 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Sections
.text Size: 32KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 696B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ