paladin316

Exes_93ba8f9e20272b4c7726a466262dae58_exe_2019-07-10_09_30.txt

Jul 10th, 2019
2,077
0
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
text 1.56 KB | None | 0 0
  1.  
  2. * MalFamily: ""
  3.  
  4. * MalScore: 2.0
  5.  
  6. * File Name: "Exes_93ba8f9e20272b4c7726a466262dae58.exe"
  7. * File Size: 359936
  8. * File Type: "PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows"
  9. * SHA256: "51146d069c8c56eee4b992ab160781eb92d03d43eea59f94a3853bf4620a3ee0"
  10. * MD5: "93ba8f9e20272b4c7726a466262dae58"
  11. * SHA1: "c30d113953e7c12612f004390c3f9aef44ce3691"
  12. * SHA512: "006b9a0a5837e52eb51ec9af2c7dc65f763ab9bc6cb394a0e3f2478e4c0562d863393a1623627eb4c75e4f8c72eb6394d4fc9c66b137a169629ce1fc43f8173a"
  13. * CRC32: "4837691B"
  14. * SSDEEP: "6144:k/0DhhPZPQMhxWccihXdYPech84a/zwurUKWRc6gITM8ck6JgfhPglMUqmp:vHtFWxisKWRLFtck6kUXN"
  15.  
  16. * Process Execution:
  17. "Exes_93ba8f9e20272b4c7726a466262dae58.exe"
  18.  
  19.  
  20. * Executed Commands:
  21.  
  22. * Signatures Detected:
  23.  
  24. "Description": "The binary likely contains encrypted or compressed data.",
  25. "Details":
  26.  
  27. "section": "name: .rsrc, entropy: 7.34, characteristics: IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ, raw_size: 0x0003da00, virtual_size: 0x0003d858"
  28.  
  29.  
  30.  
  31.  
  32. "Description": "Anomalous .NET characteristics",
  33. "Details":
  34.  
  35. "anomalous_version": "Assembly version is set to 0"
  36.  
  37.  
  38.  
  39.  
  40.  
  41. * Started Service:
  42.  
  43. * Mutexes:
  44.  
  45. * Modified Files:
  46.  
  47. * Deleted Files:
  48.  
  49. * Modified Registry Keys:
  50.  
  51. * Deleted Registry Keys:
  52.  
  53. * DNS Communications:
  54.  
  55. * Domains:
  56.  
  57. * Network Communication - ICMP:
  58.  
  59. * Network Communication - HTTP:
  60.  
  61. * Network Communication - SMTP:
  62.  
  63. * Network Communication - Hosts:
  64.  
  65. * Network Communication - IRC:
Advertisement
Add Comment
Please, Sign In to add comment