num.exe
First submission 2024-09-29 23:02:01
Last sumbission 2024-10-16 16:24:02
| File type: |
PE32 executable (GUI) Intel 80386, for MS Windows |
| Mime type: |
application/x-dosexec |
| File size: |
307.0 KB (314368 bytes) |
| Compile time: |
2024-09-29 20:19:54 |
| MD5: |
791fcee57312d4a20cc86ae1cea8dfc4 |
| SHA1: |
04a88c60ae1539a63411fe4765e9b931e8d2d992 |
| SHA256: |
27e4a3627d7df2b22189dd4bebc559ae1986d49a8f4e35980b428fadb66cf23d |
| Import Hash : |
8e9e6de8c6aa184371108e1074479bb3 |
| Sections 4 |
.text
.rdata
.data
.reloc
|
| Directories 2 |
import
relocation
|
URLs, FQDN and IP indicators 1
| URL |
Host (FQDN/IP) |
Date Added |
hXXp://185.215.113.16/test/num.exe  |
185.215.113.16 |
2024-10-16 16:24:07 |
| Name |
VAddress |
VSize |
Size |
SHA1 |
MD5 |
Suspicious |
| .text |
0x1000 |
0x1cc8f |
118272 |
c01328abd807f11db790ac069ac8f6a68d0085af |
66879e12cc36ce58a318f5ac2299b01a |
|
| .rdata |
0x1e000 |
0xcf8c |
53248 |
fce2615b0df785e169943ffd73972bb1bf48e65a |
5a4ad10aa14db5722597b4c96ac0ea1e |
|
| .data |
0x2b000 |
0x2303a4 |
123904 |
7e654258ce7efec203501119cce3af9edd686ade |
47130f1bd451e62a6f3377958ec20b2f |
|
| .reloc |
0x25c000 |
0x459e |
17920 |
f8732edaa945e2546949e4b31d8b40d054a8dc6a |
d8f492474b01bdac93fa77f23f413e35 |
|
| GetLastError |
| IsDebuggerPresent |
| RaiseException |
| TerminateProcess |
| UnhandledExceptionFilter |
Strings analysis - File found
| Compressed |
| -.zip |
| XML |
| \AppData\Roaming\FileZilla\recentservers.xml |
| Text |
| steam_tokens.txt |
| Library |
| WUSER32.DLL |
| mscoree.dll |
| dKERNEL32.dll |
| chrome.dll |
| KERNEL32.dll |
| ntdll.dll |
| WININET.dll |
| Crypt32.dll |
| MSVCRT.dll |
| USER32.dll |
| SHELL32.dll |
| SHLWAPI.dll |
| ADVAPI32.dll |
| VERSION.dll |