kcr.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 21/70 Related 2714
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 2057.50 KB (2106880 bytes)
Compile time: 2019-09-23 20:02:53
MD5: 2abeec57c0eb952ffeac8aa94b67dc54
SHA1: 30785e3562d7e1a18a7d90df3790cd762069f9ae
SHA256: cabae110afa57e30e21cf6d2b77b8be3b5f179f10534e9a18381e90ef61ea976
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-11-11 01:51:06
Last submission: 2019-11-11 01:51:06
Filename detected: - kcr.exe (1)
URL file hosting
hXXp://52.47.207.162:82/kcr.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-11-09 13:41:58 [21/70] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x1b95e4 1807872 4d6fc9ba693e568449d80bc8dd069037 47d5780fcc9cdb7167e49c917dafbbcf2d5e6f96
.rsrc 0x1bc000 0x48a8c 297984 46509bb81bc7eca6be7e1c429797ca63 75a55dcffe000d3847ba612032d28273e6269a72
.reloc 0x206000 0xc 512 2262f3563bf46c189c37fbbd294008c4 b11268b6da7bcfe31f9429c7527ab68fbc0a523d
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
http://schemas.xmlsoap.org/soap/http
http://docs.oasis-open.org/ws-sx/ws-securitypolicy/200702
http://schemas.xmlsoap.org/ws/2005/02/trust/Issue
https://sso
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-utility-1.0.xsd
http://docs.oasis-open.org/ws-sx/ws-trust/200512/Issue
http://docs.oasis-open.org/wss/2004/01/oasis-200401-wss-wssecurity-secext-1.0.xsd
http://docs.oasis-open.org/ws-sx/ws-trust/200512/Bearer
http://docs.oasis-open.org/ws-sx/ws-trust/200512
http://schemas.xmlsoap.org/ws/2005/07/securitypolicy
http://schemas.xmlsoap.org/ws/2005/02/trust/RST/Issue
http://schemas.xmlsoap.org/ws/2004/09/policy
http://schemas.xmlsoap.org/wsdl/soap12/
http://schemas.xmlsoap.org/wsdl/
http://schemas.microsoft.com/ws/06/2004/policy/http
http://www.w3.org/2005/08/addressing/anonymous</a:Address
http://docs.oasis-open.org/ws-sx/ws-trust/200512/RST/Issue
http://www.w3.org/2003/05/soap-envelope
http://www.w3.org/2005/08/addressing
http://schemas.xmlsoap.org/ws/2005/02/trust
https://<host
https://
http://schemas.xmlsoap.org/ws/2005/05/identity/NoProofKey

#infosec #automation

TheSystem Itself @ 2019-11-11 01:51:08