host.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 32/70 Related 2708
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 255.50 KB (261632 bytes)
Compile time: 2019-09-16 10:39:41
MD5: 1c58edf7def801b6fa9802a65f7af5de
SHA1: 8b9ecd64a2defb8a1f754247144c436af4c0bd16
SHA256: 9d0341338f1f3a522fca7ae7b137e2a829c9a02b9678007fd2aa889f9c160750
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-09-18 07:36:04
Last submission: 2019-09-18 07:36:04
Filename detected: - host.exe (1)
URL file hosting
hXXp://185.250.240.84/files/host.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-09-17 10:40:07 [32/70] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x3f344 259072 bee57e4e3210efed51cc483ab25e2121 8dc51e9d69a37dd2d0c4d58a31f290b26df7242b
.rsrc 0x42000 0x600 1536 db99f7ae33a644a01cd493873f40fe58 3fce408005153b2067faa33f875840853851f362
.reloc 0x44000 0xc 512 fa48390dab3b261dfd8719b97c96fd06 b4161241104b44518d102eb46621dc0c0bb03c01
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
235.111.111.111
192.168.1.122
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-09-18 07:36:05