PDA.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 25/69 Related 2628
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 785.50 KB (804352 bytes)
Compile time: 2019-08-21 08:37:21
MD5: 3bd0c7fc4ae0c1338a7750404bccfb77
SHA1: 5e3c5c9fa80cf7d41f9bbd344e37f84f715e9140
SHA256: b8528c9b4bec1057a2bd1b26927c821149cb2fbddbb409d02a038d465f74c31d
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-08-23 12:27:03
Last submission: 2019-08-23 12:27:03
Filename detected: - PDA.exe (1)
URL file hosting
hXXp://pdfgrennland.ddns.net/proforma/PDA.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-08-21 16:58:21 [25/69] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xc3a14 801792 82ebcc218cffd91f55e4623a7a30da71 27c1c17c5329f2ec38b497f541b474bc93b72adf
.rsrc 0xc6000 0x5de 1536 9153b4cc0b03ef460870743795396c51 2e64e4f04f56bf6c55dea6e3842b2487948afa82
.reloc 0xc8000 0xc 512 942873bb52bf4d9480c0246e1c729081 27734901823947cd77205e5e3468f78cf4a5b80a
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
4.4.3.1
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-08-23 12:27:04