lor.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 36/71 Related 2714
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 507.50 KB (519680 bytes)
Compile time: 2019-11-03 22:51:44
MD5: 90cbfa46539ce2af4b7b412269c5d5eb
SHA1: 0310bde0a978374bd424bffd70a343e0dcc5b86d
SHA256: 4b4395f5e2e7921f0b570a99b673000e29f44f942e94a2f4207642dda50aff12
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-11-11 01:09:03
Last submission: 2019-11-11 01:09:03
Filename detected: - lor.exe (1)
URL file hosting
hXXp://fargroup.ir/images/lor.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-11-09 08:03:25 [36/71] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x7e1e4 516608 e2ed51718b3484be3a84c6af3b729feb 7343b622380272306c1b127523b41db989ac0341
.rsrc 0x82000 0x800 2048 97a2973df95ebbeca129ad4a280b554a b92c9953983cfda2f38871389a024bd660f653b8
.reloc 0x84000 0xc 512 472577ef8d3f395136a364e04c30c3e4 e218b61c72ed8c58a639314d5b762e9d77b0d86b
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-11-11 01:09:05