fff.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 47/68 Related 2627
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 654.50 KB (670208 bytes)
Compile time: 2019-10-14 00:07:47
MD5: ad7231564ce24dad5fd507adafc7b1d2
SHA1: 63e6bafb0bb56c06ce1d8cb7bdc43ad4ea912c73
SHA256: 0c5c9a088ae160f566a1e9673cb354def61b74bbc40043737b70ccc3114d989d
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-10-21 02:51:04
Last submission: 2019-10-21 02:51:04
Filename detected: - fff.exe (1)
URL file hosting
hXXp://gessuae.ae/wp-includes/images/smilies/fff.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-10-20 17:03:18 [47/68] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xa2f14 667648 6278e22f192a5d765a1fcc002d66e0a0 ec1b6804b5fee75f1bea3c9950cf7a2d4431637e
.rsrc 0xa6000 0x600 1536 40c9f46beeb0cbd0ef497c4df4583c50 34d54e0e61587d85c166756aef6cbf3485ed06b0
.reloc 0xa8000 0xc 512 c754bb1b1927fda028765abf34890ef1 a1fc635c041a49c13aec47e289bb68d0d1207a80
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
1.8.8.8
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-10-21 02:51:04