

--------------------------------------------------------------------------------
File Information (time: 0:00:01.847677)
--------------------------------------------------------------------------------
filename         2sample03.exe
filetype         PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Wi
filesize         494592
hash sha256      45fe7e8293ea52c150e0caa578ef2dcf2da7f92cf2da1ede6f9f40a78e110f33
virustotal       /
imagebase        0x400000
entrypoint       0x7a29e
imphash          f34d5f2d4577ed6d9ceec516c1f5a744
datetime         2022-03-15 23:42:27
dll              False
directories      import, tls, resources, relocations
sections         .text, .rsrc, .reloc
features         packer, crypto


--------------------------------------------------------------------------------
Yara Plugins
--------------------------------------------------------------------------------
IsPE32
IsNET EXE
IsWindowsGUI
NETexecutableMicrosoft
CRC32 poly Constant


--------------------------------------------------------------------------------
Behavior
--------------------------------------------------------------------------------
WMI VM Detect
Xor
screenshot


--------------------------------------------------------------------------------
Crypto
--------------------------------------------------------------------------------
CRC32 poly Constant


--------------------------------------------------------------------------------
Packer
--------------------------------------------------------------------------------
Microsoft Visual Studio NET
Microsoft Visual C v70 Basic NET additional
Microsoft Visual C Basic NET
Microsoft Visual Studio NET additional
Microsoft Visual C v70 Basic NET
NET executable 
NET executable


--------------------------------------------------------------------------------
Sections Suspicious
--------------------------------------------------------------------------------
For each section the value of entropy is less than 6


--------------------------------------------------------------------------------
Metadata
--------------------------------------------------------------------------------
ProductName      c4Pxy9GG7NzdzzNJ
CompanyName      WADJF2m6ocg37Y5rfeE3whBg1
InternalName     eXUMHAyDeZuVjBZb6NeM9mnJGQIQY.exe
LegalCopyright   8YRGZwsWffY46y7RvDrfl
Comments         Lh8fpLF02OgcwHEps7MapnbF
OriginalFilename SMmtFvx8KNdHv2ZQbcKPLD0NNw.exe
ProductVersion   886.816.416.565
FileVersion      934.864.230.656


--------------------------------------------------------------------------------
Import function
--------------------------------------------------------------------------------
mscoree.dll      1


--------------------------------------------------------------------------------
File
--------------------------------------------------------------------------------
gdi32.dll        Library
kernel32.dll     Library
user32.dll       Library
winmm.dll        Library
mscoree.dll      Library
