kud.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 14/69 Related 2714
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 436.50 KB (446976 bytes)
Compile time: 2019-10-30 21:47:16
MD5: ec286d38ad05922c365c0556217ee3bc
SHA1: 45a2d535ca8cdc944d7250bd955013bebf0c9f52
SHA256: 9835b3e0b9d05955ef48f7d73fcb3ac258e0a37b18e16c1952f7867beacd4c90
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-11-02 13:18:03
Last submission: 2019-11-02 13:18:03
Filename detected: - kud.exe (1)
URL file hosting
hXXp://espace-developpement.org/calendar/kud.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-10-30 21:18:53 [14/69] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0x6c4b4 443904 8ab609ea33f899db68e9861ec606db06 74f5a0c629ace808248cd09d83d60afe5acfb26f
.rsrc 0x70000 0x800 2048 19197cc7f31b7a381490306b1a73bfe3 5c7f9cbb5e7dc6f66bfbfc91e728e4bbcccb2d29
.reloc 0x72000 0xc 512 43335682874cb2d722974566326e2b3b d75558e37561ec97b1281ece7afb6a7baffab4ca
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
2.0.2.1
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-11-02 13:18:03