onebillon.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 15/67 Related 2098
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 397.50 KB (407040 bytes)
Compile time: 1995-06-23 08:26:22
MD5: 4e029a677a9d1015cd811c1f00405209
SHA1: 3c639871a8b832e8a6e2cc2437aebc178cf8aafc
SHA256: 158fcff27cf95d057bf5016ad850d11f66be535fa5842a64dfd7fe2e02d46636
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2018-10-24 12:48:04
Last submission: 2018-10-24 12:48:04
Filename detected: - onebillon.exe (1)
URL file hosting
hXXp://6cameronr.ga/onebillon.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2018-10-24 01:49:00 [15/67] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x62934 403968 7f6cf8fa4c75a01b1322249cfc3fadee 7341c2f4917e7027d25b5474df42d5298eeab403
.rsrc 0x66000 0x638 2048 732609390fab16a522154197d44bb79b d4282b180c03b60169f7ecb6ffb100a9cc5b00e6
.reloc 0x68000 0xc 512 8e7256df4906ecb9a8141216058e284c 8426facb05634944ef9c8772878e7eaeac0e4e6e
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
USER32.dll
mscoree.dll
IP Found
17.9.2.3
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2018-10-24 12:48:19