2055970

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 24/67 Related 2635
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 538.50 KB (551424 bytes)
Compile time: 2019-09-01 23:09:30
MD5: 6efa19047e613a29860b4106e01bed69
SHA1: f9738596e8f9e9eda66214d9163a81510974bf83
SHA256: e9199ac863808a080ec5def88f8ebf96b0dd4a10fa4ae3dbf98909fdcfa19c62
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-09-04 07:57:06
Last submission: 2019-09-04 07:57:06
Filename detected: - 2055970 (1)
URL file hosting
hXXp://posqit.net/CTW/2055970VirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-09-02 15:55:37 [24/67] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x85d44 548352 61374fd02cede5afaa91a103d8182047 51e668c998d1176113325b08700648758b206a70
.rsrc 0x88000 0x800 2048 7cfa39ea6526e2bdb220162f71f36a08 8b71343898dac0267fee7f11069d1eab6de17a8b
.reloc 0x8a000 0xc 512 c734d3f0652ce9fbf25df1bf98c36a51 68774114802fb4980cca4855d2e9b18daa725841
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Executable
o_.So
FIle type: Text
*.txt
Text Files|*.txt
FIle type: Library
mscoree.dll
IP Found
1.5.3.9
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-09-04 07:57:08