

--------------------------------------------------------------------------------
File Information (time: 0:00:01.683262)
--------------------------------------------------------------------------------
filename         2sample02.exe
filetype         PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Wi
filesize         494592
hash sha256      48e3b8c67534ca86179306e98a15a0a71273f9fd845fd026c4dd584a1dfa7928
virustotal       /
imagebase        0x400000
entrypoint       0x7a29e
imphash          f34d5f2d4577ed6d9ceec516c1f5a744
datetime         2022-03-15 23:42:27
dll              False
directories      import, tls, resources, relocations
sections         .text, .rsrc, .reloc
features         packer, crypto


--------------------------------------------------------------------------------
Yara Plugins
--------------------------------------------------------------------------------
IsPE32
IsNET EXE
IsWindowsGUI
NETexecutableMicrosoft
CRC32 poly Constant


--------------------------------------------------------------------------------
Behavior
--------------------------------------------------------------------------------
WMI VM Detect
Xor
screenshot


--------------------------------------------------------------------------------
Crypto
--------------------------------------------------------------------------------
CRC32 poly Constant


--------------------------------------------------------------------------------
Packer
--------------------------------------------------------------------------------
Microsoft Visual Studio NET
Microsoft Visual C v70 Basic NET additional
Microsoft Visual C Basic NET
Microsoft Visual Studio NET additional
Microsoft Visual C v70 Basic NET
NET executable 
NET executable


--------------------------------------------------------------------------------
Sections Suspicious
--------------------------------------------------------------------------------
For each section the value of entropy is less than 6


--------------------------------------------------------------------------------
Metadata
--------------------------------------------------------------------------------
ProductName      4S2dvBGbP39GfOVwE
CompanyName      DVzlFJVX5aLZo3o9iWAWlQD
InternalName     jZzuSUmIVdiCmLMlRYG.exe
LegalCopyright   smVGifk9wkEbRHCj
Comments         nFaxCE5WuKVJR
OriginalFilename TKoA.exe
ProductVersion   414.404.593.389
FileVersion      921.574.176.583


--------------------------------------------------------------------------------
Import function
--------------------------------------------------------------------------------
mscoree.dll      1


--------------------------------------------------------------------------------
File
--------------------------------------------------------------------------------
gdi32.dll        Library
kernel32.dll     Library
user32.dll       Library
winmm.dll        Library
mscoree.dll      Library


--------------------------------------------------------------------------------
Fuzzing
--------------------------------------------------------------------------------
String too long
