

--------------------------------------------------------------------------------
File Information (time: 0:00:01.724525)
--------------------------------------------------------------------------------
filename         2sample04.exe
filetype         PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Wi
filesize         494592
hash sha256      c3c23cf38a88f1722b981b7a60bfd67f63b8612c15f748293bf4e7892e064030
virustotal       /
imagebase        0x400000
entrypoint       0x7a29e
imphash          f34d5f2d4577ed6d9ceec516c1f5a744
datetime         2022-03-15 23:42:27
dll              False
directories      import, tls, resources, relocations
sections         .text, .rsrc, .reloc
features         packer, crypto


--------------------------------------------------------------------------------
Yara Plugins
--------------------------------------------------------------------------------
IsPE32
IsNET EXE
IsWindowsGUI
NETexecutableMicrosoft
CRC32 poly Constant


--------------------------------------------------------------------------------
Behavior
--------------------------------------------------------------------------------
WMI VM Detect
Xor
screenshot


--------------------------------------------------------------------------------
Crypto
--------------------------------------------------------------------------------
CRC32 poly Constant


--------------------------------------------------------------------------------
Packer
--------------------------------------------------------------------------------
Microsoft Visual Studio NET
Microsoft Visual C v70 Basic NET additional
Microsoft Visual C Basic NET
Microsoft Visual Studio NET additional
Microsoft Visual C v70 Basic NET
NET executable 
NET executable


--------------------------------------------------------------------------------
Sections Suspicious
--------------------------------------------------------------------------------
For each section the value of entropy is less than 6


--------------------------------------------------------------------------------
Metadata
--------------------------------------------------------------------------------
ProductName      LLw6wOjj4
CompanyName      0lI
InternalName     W0WNA55y4HGcu3LU8.exe
LegalCopyright   W3IqmgRjAp9VF
Comments         f5E3BKpEUhRTm
OriginalFilename kvypEqVOq5Al5U4VuoBjH.exe
ProductVersion   395.375.587.2
FileVersion      773.473.428.742


--------------------------------------------------------------------------------
Import function
--------------------------------------------------------------------------------
mscoree.dll      1


--------------------------------------------------------------------------------
File
--------------------------------------------------------------------------------
gdi32.dll        Library
kernel32.dll     Library
user32.dll       Library
winmm.dll        Library
mscoree.dll      Library


--------------------------------------------------------------------------------
Fuzzing
--------------------------------------------------------------------------------
String too long
