gaqanalysis.blogg.se

text IMAGE _SCN_ALIGN _MASK, IMA GE_SCN_ALI GN_256BYTE S, IMAGE_S CN_ALIGN_1 6BYTES, IM AGE_SCN_AL IGN_64BYTE S, IMAGE_S CN_ALIGN_1 BYTES, IMA GE_SCN_MEM _EXECUTE, IMAGE_SCN_ CNT_INITIA LIZED_DATA, IMAGE_SC N_ALIGN_20 48BYTES, I MAGE_SCN_A LIGN_1024B YTES, IMAG E_SCN_ALIG N_32BYTES, IMAGE_SCN _ALIGN_4BY TES, IMAGE _SCN_ALIGN _8BYTES, I MAGE_SCN_C NT_CODE, I MAGE_SCN_A LIGN_8192B YTES, IMAG E_SCN_ALIG N_4096BYTE S, IMAGE_S CN_MEM_REA D text section and no other executable section

Source: C:\Users\u ser\Deskto p\filezill a.exeĬlassification label: sus22.winE file has an executable. Static PE information: Resource n ame: RT_IC ON type: G LS_BINARY_ LSB_FIRST Static PE information: Number of sections : 12 > 10 PE file contains more sections than normal PE Siganture Subject Chain: CN=Tim Kos se, O=Tim Kosse, STR EET=Lukass tr. String found in binary or memory: w.digicert. String found in binary or memory: ki.filezil la-project. String found in binary or memory: lcome.file zilla-proj ect.org/we lcome?type =client&ca tegory=%s& version=Wh at String found in binary or memory: lcome.file zilla-proj ect.org/we lcome?type =client&ca tegory=%s& version= String found in binary or memory: date.filez illa-proje ct.org/upd ate.phppla tformunkno wnversion% d.%dosvers ionosarch6 432HKEY_CU String found in binary or memory: date.filez illa-proje ct.org/upd ate.php String found in binary or memory: / CPS0C String found in binary or memory: lezilla-pr / support.ph p?type=cli ent&mode=h elpbugrepo rtcustom String found in binary or memory: lezilla-pr / support.ph p?type=cli ent&mode= String found in binary or memory: lezilla-pr / probe.php

String found in binary or memory: lezilla-pr / Build String found in binary or memory: lezilla-pr / A String found in binary or memory: lezilla-pr / String found in binary or memory: p.storj.io /#/signupI D_EXTRA_HO ST_DESCID_ EXTRA_HOST &Logon String found in binary or memory: p.storj.io /#/signup String found in binary or memory: p.sectigo. String found in binary or memory: p.digicert. String found in binary or memory: mac.musich all.cz String found in binary or memory: filezilla- project.or g/ip.php package s/wx3/src/ common/uti lscmn.cppw x.sys_erro rFailed String found in binary or memory: ehttpwx./. sectigo.c om/Sectigo RSACodeSig ningCA.crt 0# String found in binary or memory: 4.digicert. String found in binary or memory: 3.digicert. sectigo.c om/Sectigo RSACodeSig ningCA.crl 0s String found in binary or memory: erts.digic ert.com/Di giCertAssu redIDRootC A.crt0 String found in binary or memory: erts.digic ert.com/Di giCertAssu redIDCA-1.