buk.exe

Is DLL Packer Anti Debug Anti VM Signed XOR Related 2790
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 281.00 KB (287744 bytes)
Compile time: 2020-06-10 00:27:24
MD5: df8a52c6f675544433cc9277bfe0e75f
SHA1: efbf25d44611a051873dfe671fdbf3f0abfc129b
SHA256: d0a5e15ab3473f7c9a0901118c68195ab28f05ce802c03151062c1abbed06f6b
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2020-09-08 23:57:03
Last submission: 2020-09-08 23:57:03
Filename detected: - buk.exe (1)
URL file hosting
hXXp://ivobrandao.com/wp-admin/maint/files/buk.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
No report available
PE Sections 1 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x459e4 285184 fd5841b0d79a450a4b534453e495cf0d 9d91a33bd7541e95fa89cf25d6f5d79c37b2d179
.rsrc 0x48000 0x508 1536 90fdbecbda536c4eb71516db244ede97 1f38b0c9def12bb3521cf6e5141b1c21dd1e2490
.reloc 0x4a000 0xc 512 0ec531d2a4de2c83b63d6d33d7941ea3 222170dff3d252e8b6ddd1b5e06ffba2a5b35033
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: XML
System.Xml
FIle type: Library
USER32.dll
BCRYPT.DLL
psapi.dll
mscoree.dll
vaultcli.dll
IP Found
No IP detected
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2020-09-08 23:57:05