new.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 43/67 Related 2790
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 512.50 KB (524800 bytes)
Compile time: 2019-10-17 06:56:08
MD5: 87f55cd88ee443f4f90e166a70594f22
SHA1: b1f77196fe45fcfdfa2f616bfecd21a5d8797dea
SHA256: a7fd7c4f2cf7f1a0d3b07e9fded14746680f036ea088cf8f7666f181a4495316
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-12-06 14:03:04
Last submission: 2019-12-06 14:03:04
Filename detected: - new.exe (1)
URL file hosting
hXXp://fomoportugal.com/new.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-12-05 13:39:19 [43/67] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x7f5d4 521728 7b19e363e2bcbe53bcf57a8bb88f23a9 f5339539878a985b3f553c772b2595d6f9acabcb
.rsrc 0x82000 0x61c 2048 c58956c82bdd402c5addd6a1756c99dd 79f35686f4c4a612e2eba6e7c0b4562fa72ef486
.reloc 0x84000 0xc 512 6e98380385329c5e9caa94a5abe62000 3839069cf0075d56dea7fad94348f8936e25ed89
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Text
EventProviderWriter.txt
FIle type: Library
System.Windows.Forms.dll
System.dll
System.Core.dll
System.Management.dll
mscoree.dll
ole32.dll
IP Found
No IP detected
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-12-06 14:03:06