| File Path | Type and Hashes |
|---|
| Match Rules |
|---|
| File Name: | fn1o2ifn1f21n2of1no12oj2b4o3h3jhwdvssdfosdfk.exe |
| File Type: | PE32 executable (console) Intel 80386, for MS Windows |
| SHA1: | acbbb49f6ed2e281f81cc82240a0c954f178d6a1 |
| MD5: | 0066f7a96a58509de0dc17c82403b7e4 |
| First Seen Date: | 2018-06-02 10:15:46.763576 ( ) |
| Number of Clients Seen: | 4 |
| Last Analysis Date: | 2018-06-02 10:15:46.763576 ( ) |
| Human Expert Analysis Result: | No human expert analysis verdict given to this sample yet. |
| Property | Value |
|---|---|
| magic literal enum | 1 |
| file type enum | 6 |
| debug artifacts | [] |
| number of sections | 9 |
| trid | [] |
| compilation time stamp | 0x5B115E2D [Fri Jun 1 14:54:37 2018 UTC] |
| entry point | 0x82a200 (.vmp1) |
| machine type | Intel 386 or later - 32Bit |
| file size | 3438592 |
| ssdeep | |
| sha256 | 360d9204675c0317c6712c5d0ffd1f30651684a4fe59d0b64fa3ea225e4e928b |
| exifinfo | [] |
| mime type | application/x-dosexec |
| imphash |
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | MD5 |
|---|---|---|---|---|---|
| .text | 0x1000 | 0x73be6 | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .rdata | 0x75000 | 0x1d4a2 | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .data | 0x93000 | 0x6234 | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .gfids | 0x9a000 | 0xcd4 | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .tls | 0x9b000 | 0x9 | 0x200 | 0.0203931352361 | 1f354d76203061bfdd5a53dae48d5435 |
| .vmp0 | 0x9c000 | 0x2f9cb5 | 0x0 | 0.0 | d41d8cd98f00b204e9800998ecf8427e |
| .vmp1 | 0x396000 | 0x346de0 | 0x346e00 | 7.99428570594 | 2b317e5f396318768784ed8e2a887492 |
| .reloc | 0x6dd000 | 0x124 | 0x200 | 2.79850334772 | 95eadef518727849e8649fc39887f340 |
| .rsrc | 0x6de000 | 0x1d5 | 0x200 | 4.70732650868 | 70adc6d04f7c6f56e671d012613e68b1 |
{u'lang': u'LANG_ENGLISH', u'name': u'RT_MANIFEST', u'offset': 7200856, u'sha256': u'4bb79dcea0a901f7d9eac5aa05728ae92acb42e0cb22e5dd14134f4421a3d8df', u'type': u'XML 1.0 document text', u'size': 381}