thai.exe

Is DLL Packer Anti Debug Anti VM Signed XOR AntiVirus 51/70 Related 2714
File details Download PDF Report
File type: PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
File size: 673.00 KB (689152 bytes)
Compile time: 2019-10-16 00:17:11
MD5: f687cc63538c88bb8961354bd015b5d2
SHA1: a1f69145abb0051ac9a68b2004b208dc00277692
SHA256: 112811f878328638df3306820f3aa7c9ff50f8a004e6d6972bebd88128374c81
Import hash: f34d5f2d4577ed6d9ceec516c1f5a744
Sections 3 .text .rsrc .reloc
Directories 3 import resource relocation
First submission: 2019-10-26 11:45:04
Last submission: 2019-10-26 11:45:04
Filename detected: - thai.exe (1)
URL file hosting
hXXp://dev-nextgen.com/home/wp-admin/network/admin/thai.exeVirusTotal
Antivirus Report
Report Date Detection Ratio Permalink Update
2019-10-23 17:20:01 [51/70] VirusTotal
PE Sections 2 suspicious
Name VAddress VSize Size MD5 SHA1
.text 0x2000 0xa7634 686080 01aa10f5b1fe5a4e855995d8af9fe42b 3a1b7414359a0dafe0f032caad06e2f29d7e4150
.rsrc 0xaa000 0x800 2048 74b3f8f35d5c02426e97796860aa5e36 63b6894d3bd703ca0fc72b19398e8dbe05fd04c7
.reloc 0xac000 0xc 512 8b37e618d665a4a50eb8bdc49ddac583 3756fb1eeee5eb2441c3727081090cebcd0e8340
Meta Info
No Meta found in this file
XOR
No XOR informations found in this file.
Signature
This file isn't digitally signed
Packer(s)
Microsoft Visual C# / Basic .NET
Microsoft Visual Studio .NET
.NET executable
Microsoft Visual C# v7.0 / Basic .NET
File found
FIle type: Library
mscoree.dll
IP Found
No IP detected
URL(s)
No URL found

#infosec #automation

TheSystem Itself @ 2019-10-26 11:45:04