floprotected.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 44/71 Related 2714
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 518.00 KB (530432 bytes)
Compile time: 2019-11-01 17:57:53
MD5: 4aaf4fd3151412e753fd48e783af5503
SHA1: c54072c56da33878bdcfd904ed34ddc8049725c8
SHA256: 726de0c3454d9b825f48309b1dfb02b35792dee0f66aa126d8697abb41790a18
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-11-09 11:42:04
Last submission: 2019-11-09 11:42:04
Filename detected: - floprotected.exe (1)
URL file hosting
hXXp://185.112.250.128/floprotected.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-11-07 20:10:24 [44/71] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x80df4 527872 1480d36b83c52b1aad6b3a7c37c0659c f47d91538b031ca047f3188c950f6237d369319a
.rsrc 0x84000 0x5d0 1536 d836e9b94cccf20b618eef52fc472fb1 82e769a0f317cd0401d3f02a7fba9f461a25f4bb
.reloc 0x86000 0xc 512 1919d607ae992b6c74ecb6a78ce08003 a7a1d4204615b641a9b0822a54df050e35f51ff8
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-11-09 11:42:06