

--------------------------------------------------------------------------------
File Information (time: 0:00:01.707152)
--------------------------------------------------------------------------------
filename         2sample06.exe
filetype         PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Wi
filesize         494592
hash sha256      09ae4f8143792568762863fa05571ba43bd08b93d3a64399b59a86b347d3b15b
virustotal       /
imagebase        0x400000
entrypoint       0x7a29e
imphash          f34d5f2d4577ed6d9ceec516c1f5a744
datetime         2022-03-15 23:42:27
dll              False
directories      import, tls, resources, relocations
sections         .text, .rsrc, .reloc
features         packer, crypto


--------------------------------------------------------------------------------
Yara Plugins
--------------------------------------------------------------------------------
IsPE32
IsNET EXE
IsWindowsGUI
NETexecutableMicrosoft
CRC32 poly Constant


--------------------------------------------------------------------------------
Behavior
--------------------------------------------------------------------------------
WMI VM Detect
Xor
screenshot


--------------------------------------------------------------------------------
Crypto
--------------------------------------------------------------------------------
CRC32 poly Constant


--------------------------------------------------------------------------------
Packer
--------------------------------------------------------------------------------
Microsoft Visual Studio NET
Microsoft Visual C v70 Basic NET additional
Microsoft Visual C Basic NET
Microsoft Visual Studio NET additional
Microsoft Visual C v70 Basic NET
NET executable 
NET executable


--------------------------------------------------------------------------------
Sections Suspicious
--------------------------------------------------------------------------------
For each section the value of entropy is less than 6


--------------------------------------------------------------------------------
Metadata
--------------------------------------------------------------------------------
ProductName      2DEXtDYc2pN
CompanyName      icEFSl
InternalName     eLC9wQ.exe
LegalCopyright   s5mX6LB1vToKIm7t33i0AInImLHHJ
Comments         EfGywr6tdCHj8cuIpUtjIG3Z9
OriginalFilename GjicD3k6P4DfXto.exe
ProductVersion   135.905.289.579
FileVersion      547.895.893.221


--------------------------------------------------------------------------------
Import function
--------------------------------------------------------------------------------
mscoree.dll      1


--------------------------------------------------------------------------------
File
--------------------------------------------------------------------------------
gdi32.dll        Library
kernel32.dll     Library
user32.dll       Library
winmm.dll        Library
mscoree.dll      Library


--------------------------------------------------------------------------------
Fuzzing
--------------------------------------------------------------------------------
String too long
