amd64.exe
First submission 2024-10-11 11:11:13
| File type: |
PE32+ executable (GUI) x86-64, for MS Windows |
| Mime type: |
application/x-dosexec |
| File size: |
5780.53 KB (5919264 bytes) |
| Compile time: |
1970-01-01 01:00:00 |
| MD5: |
35b5a66be6e3bcfbf109f19ceac7cbb1 |
| SHA1: |
d7ec588d36eaa1b81b2c069c07105891a30dfd17 |
| SHA256: |
3a68cd7db885a8b3c3124386739fb31a6bf459bfa53cd0e63bf1e1bcf706496c |
| Import Hash : |
c2d457ad8ac36fc9f18d45bffcd450c2 |
| Sections 8 |
.text
.rdata
.data
.pdata
.xdata
.idata
.reloc
.symtab
|
| Directories 2 |
import
relocation
|
URLs, FQDN and IP indicators 1
| URL |
Host (FQDN/IP) |
Date Added |
hXXp://122.51.105.218/amd64.exe  |
122.51.105.218 |
2024-10-11 11:11:13 |
| Name |
VAddress |
VSize |
Size |
SHA1 |
MD5 |
Suspicious |
| .text |
0x1000 |
0x2571ce |
2454016 |
bde5bac3c46e1ca3477d309cffb3b022561d7974 |
84e0277ed2adc1b0df0e7fabaae477a1 |
|
| .rdata |
0x259000 |
0x2fedb0 |
3141120 |
dd8315479141362b3e4b0c3f9a46a29914903dd5 |
157c927c2c61017a6ca697bf9be38f5d |
|
| .data |
0x558000 |
0xc2f60 |
218624 |
d10b715b1f6b700f9bf70c8c5eba781baaaf6d1d |
1cc79fee237f029fab4eaceb04cef250 |
|
| .pdata |
0x61b000 |
0xde90 |
57344 |
363002146676aa44f1226f4f66481ccd8c845094 |
d38647bf681ccb2f46df3a50b537ae79 |
|
| .xdata |
0x629000 |
0xb4 |
512 |
3505d4239ff23996b84c425b1e6c7189447fbecb |
2e6d8fe37c7015f0e1f121bd6f0aa308 |
|
| .idata |
0x62a000 |
0x554 |
1536 |
70438fb64f65299e0310e4ce3f06ae45817bb55f |
81bb5e2037f4792401bdb0a9be189338 |
|
| .reloc |
0x62b000 |
0xab1a |
44032 |
b073393345767c399038347ecfc024f4b5361e6e |
b33bb7e47792197279199e6877bdf21d |
|
| .symtab |
0x636000 |
0x4 |
512 |
943ae54f4818e52409fbbaf60ffd71318d966b0d |
07b5472d347d42780469fb2654b7fc54 |
|
Strings analysis - File found
| Library |
| WS2_32.dll |
| WINMM.dll |
| ntdll.dll |
| bcryptprimitives.dll |
| Powrprof.dll |
| KERNEL32.dll |
Strings analysis - Possible IPs found 13
| 4.1.2.2 |
| 5.4.112.5 |
| 1.1.2.1 |
| 4.1.2.1 |
| 1.1.3.1 |
| 5.4.32.5 |
| 2.5.4.102 |
| 1.1.1.1 |
| 127.0.0.1 |
| 2.5.4.62 |
| 72.5.4.82 |
| 8.8.8.8 |
| 4.52.5.4 |
Strings analysis - Possible URLs found 1
Related files by ImpHash 8 c2d457ad8ac36fc9f18d45bffcd450c2