Exes_a55323375fe175d72b3909dcdbe1ec59_exe_2019-07-09_10_30.txt

* MalFamily: ""

* MalScore: 1.0

* File Name: "Exes_a55323375fe175d72b3909dcdbe1ec59.exe"
* File Size: 313344
* File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
* SHA256: "89c525122f03f848f6312aa24f0353b9b586c305b1d5f1c0d7d5d29d1206c617"
* MD5: "a55323375fe175d72b3909dcdbe1ec59"
* SHA1: "0f221efdc929dcaaff5d5e18777eb5117a9ce2fd"
* SHA512: "859eeff7eb88609a116af793e7eea3f6c87c426bb153c6a1d7cdbfaefa26ef8bde29f3e8bc630fe1537b11da0154952b351a0a2587174590438eb8a500c3135a"
* CRC32: "5EE3076C"
* SSDEEP: "6144:jIR3BoCTq8idJLVGeqNtkicFcGYsM6EZVKveDCLgoZ8hI6HcvRA/NvyOC/:CiCThidvwZcFcGrM6QVKveDegouI64B"

* Process Execution:
    "Exes_a55323375fe175d72b3909dcdbe1ec59.exe"


* Executed Commands:

* Signatures Detected:

        "Description": "The binary likely contains encrypted or compressed data.",
        "Details":

                "section": "name: .text, entropy: 7.96, characteristics: IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ, raw_size: 0x0004be00, virtual_size: 0x0004bd74"





* Started Service:

* Mutexes:

* Modified Files:

* Deleted Files:

* Modified Registry Keys:

* Deleted Registry Keys:

* DNS Communications:

* Domains:

* Network Communication - ICMP:

* Network Communication - HTTP:

* Network Communication - SMTP:

* Network Communication - Hosts:

* Network Communication - IRC: