bbsd.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 35/67 Related 2714
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 473.00 KB (484352 bytes)
Compile time: 2019-11-16 12:20:54
MD5: c0d0b7754eea85e949069535b70673fb
SHA1: 80217714b06c5bc7cfd31f068baefdf6748fc48e
SHA256: 0b170ea94a7a76b7b927c071ee3a369bdfa7abd06be4cd0437048180033281c1
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 4 .text .sdata .rsrc .reloc
Directories 4 import resource debug relocation
First submission: 2019-11-18 11:57:05
Last submission: 2019-11-18 11:57:05
Filename detected: - bbsd.exe (1)
URL file hosting
hXXp://45.142.213.230/aas/bbsd.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-11-18 10:51:09 [35/67] VirusTotal
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x17fc4 98304 40dc4575ba5a7e3d13ab31c3955b1ed6 5e9fbb82a8723d79963b52fcf4afa0a73fda629e
.sdata 0x1a000 0x34e06 217088 c63042abc983ebc3313a5a352932ae2b 545f52e04fc0b45c6270c8db2f5320117335a277
.rsrc 0x50000 0x28c34 167424 93abfdd9cce44fef8f751f09c930c797 6179f06ee2a3abde7f4787999369783aa9dc6293
.reloc 0x7a000 0xc 512 32311c32f8d1f9e57fd647c7ee4749d6 bd72970eaad02608bd0031c6659753a36440e80c
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Database
\key3.db
\key4.db
FIle type: Library
mscoree.dll
ekernel32.dll
USER32.dll
KERNEL32.dll
GDI32.dll
MSVCRT.dll
IP Found
51.15.22.167
1.0.0.23
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-11-18 11:58:07