metrocatt.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 17/67 Related 2708
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 534.50 KB (547328 bytes)
Compile time: 1976-12-10 15:39:35
MD5: aa1a4272d37c4f35ebae69cb74e244e0
SHA1: c477a7bbfcbcf544bf20a453d6c2e0f33c626b6f
SHA256: 68b33dcafb1dc101ab194a901b6760f95b8eaf781ab4b108676d450a048b0af9
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-09-16 17:21:10
Last submission: 2019-09-16 17:21:10
Filename detected: - metrocatt.exe (1)
URL file hosting
hXXp://songpholholding.net/metrocatt.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-09-16 10:22:02 [17/67] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x84ee4 544768 03a9d500b251199612586879374d4c5c 85ffc05d93dc08cea4c64cc685e53f00334d24d5
.rsrc 0x88000 0x5ec 1536 83daf6c3acd497901c0f353fc9cf7d9a 1a36b93c8cae44ececa9f8391f7ebf260372995c
.reloc 0x8a000 0xc 512 f05d6598e221dd605362357886f1104a 2e650f38a85401cb0592abdff6085e2fcf720ace
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
1.1.1.1
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-09-16 17:21:12