30hCP55

Is DLL Packer Anti Debug Anti VM Signed XOR

File details Download PDF Report
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
File size:	316.00 KB (323584 bytes)
Compile time:	2020-07-29 09:56:48
MD5:	ac3f689147fb565631a6567834c783b9
SHA1:	7b8bf9cd986bc987b0d23fe07baa7ff520d70cae
SHA256:	ee3745c938112b7b49e840787f7e3bf4031c51e1e685c7ad073af64de818f49d
Import hash:	de2f3a78b61d2f88459d7cd2233b67d5
Sections 4	.text .rdata .data .rsrc
Directories 2	import resource
Anti Virtual Machine 1	VMCheck.dll
First submission:	2021-01-09 10:09:06
Last submission:	2021-01-09 10:09:06
Filename detected:	- 30hCP55 (1)

URL file hosting
hXXp://biglaughs.org/smallpotatoes/30hCP55/

Antivirus Report
Report Date	Detection Ratio	Permalink	Update
No report available

PE Sections 1 suspicious
Name	VAddress	VSize	Size	MD5	SHA1
.text	0x1000	0x324b9	208896	ad12a87ce5af84985a5937c16cb42f9a	bd7e135725cc7b48c46f66492108e1b358f2c4b2
.rdata	0x34000	0xae78	45056	52af319145e03403c30fb1dbb0604a3a	2670f207f8f8659a8356926015f10d8b39b09bc5
.data	0x3f000	0x6e48	12288	c23078137e8924b2fd85544807968052	bac9f9c0b99954eea0ffbab81124343d51971ad0
.rsrc	0x46000	0xc908	53248	dcffa1beb32fe852ea9ef5fb6cd194a3	75b81fca38f96ced689b3559b6eb56a728558171

Meta Info
No Meta found in this file

XOR
No XOR informations found in this file.

Signature
This file isn't digitally signed

Packer(s)
Microsoft Visual C++ v6.0
Microsoft Visual C++ 5.0
Microsoft Visual C++

File found
FIle type: Library
USER32.dll
ADVAPI32.dll
SHLWAPI.dll
SHELL32.dll
KERNEL32.dll
OLEAUT32.dll
oledlg.dll
comdlg32.dll
comctl32.dll
OLEPRO32.DLL
ole32.dll
GDI32.dll

IP Found
No IP detected

URL(s)
file://

#infosec #automation

TheSystem Itself @ 2021-01-09 10:09:07