Static | ZeroBOX

PE Compile Time

2015-09-01 19:07:29

PDB Path

e:\Documenti\Coding\HTTPBotFe\slowloris\slowloris\obj\Release\slowloris.pdb

PE Imphash

f34d5f2d4577ed6d9ceec516c1f5a744

Sections

Name Virtual Address Virtual Size Size of Raw Data Entropy
.text 0x00002000 0x00000bf4 0x00000c00 5.00678456797
.rsrc 0x00004000 0x00000540 0x00000600 3.91749805575
.reloc 0x00006000 0x0000000c 0x00000200 0.0815394123432

Resources

Name Offset Size Language Sub-language File type
RT_VERSION 0x000040a0 0x000002b0 LANG_NEUTRAL SUBLANG_NEUTRAL data
RT_MANIFEST 0x00004350 0x000001ea LANG_NEUTRAL SUBLANG_NEUTRAL XML 1.0 document, UTF-8 Unicode (with BOM) text, with CRLF line terminators

Imports

Library mscoree.dll:
0x402000 _CorExeMain

!This program cannot be run in DOS mode.
`.rsrc
@.reloc
v2.0.50727
#Strings
<Module>
slowloris.exe
Program
slowloris
mscorlib
System
Object
System.Reflection
AssemblyTitleAttribute
AssemblyDescriptionAttribute
AssemblyConfigurationAttribute
AssemblyCompanyAttribute
AssemblyProductAttribute
AssemblyCopyrightAttribute
AssemblyTrademarkAttribute
AssemblyCultureAttribute
System.Runtime.InteropServices
ComVisibleAttribute
GuidAttribute
AssemblyVersionAttribute
AssemblyFileVersionAttribute
System.Diagnostics
DebuggableAttribute
DebuggingModes
System.Runtime.CompilerServices
CompilationRelaxationsAttribute
RuntimeCompatibilityAttribute
Environment
get_TickCount
Random
String
get_Length
get_Chars
Substring
Concat
System.Net
WebClient
WebHeaderCollection
get_Headers
System.Collections.Specialized
NameValueCollection
HttpRequestHeader
set_Item
ToString
UploadString
System.ComponentModel
Component
Dispose
Exception
slowloris
Copyright
2015
$8928e2ad-af24-4d3b-a712-f67385d9d75c
1.0.0.0
WrapNonExceptionThrows
RSDS!yYQ0
e:\Documenti\Coding\HTTPBotFe\slowloris\slowloris\obj\Release\slowloris.pdb
_CorExeMain
mscoree.dll
<?xml version="1.0" encoding="UTF-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0">
<assemblyIindex.phptity version="1.0.0.0" name="MyApplication.app"/>
<trustInfo xmlns="urn:schemas-microsoft-com:asm.v2">
<security>
<requestedPrivileges xmlns="urn:schemas-microsoft-com:asm.v3">
<requestedExecutionLevel level="asInvoker" uiAccess="false"/>
</requestedPrivileges>
</security>
</trustInfo>
</assembly>
User-Agent
Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.157 Safari/537.36
application/x-www-form-urlencoded
VS_VERSION_INFO
VarFileInfo
Translation
StringFileInfo
000004b0
FileDescription
slowloris
FileVersion
1.0.0.0
InternalName
slowloris.exe
LegalCopyright
Copyright
2015
OriginalFilename
slowloris.exe
ProductName
slowloris
ProductVersion
1.0.0.0
Assembly Version
1.0.0.0
Antivirus Signature
Bkav Clean
Elastic Clean
ClamAV Clean
CMC Clean
CAT-QuickHeal Clean
ALYac Gen:Variant.Bulz.375589
Cylance Clean
VIPRE Trojan.Win32.Generic!BT
AegisLab Trojan.Win32.Bulz.4!c
Sangfor Trojan.Win32.Wacatac.B
K7AntiVirus Clean
BitDefender Gen:Variant.Bulz.375589
K7GW Clean
CrowdStrike win/malicious_confidence_60% (D)
Baidu Clean
Cyren W32/Trojan.VMCS-4634
Symantec ML.Attribute.HighConfidence
ESET-NOD32 Clean
APEX Malicious
Paloalto generic.ml
Cynet Clean
Kaspersky UDS:DangerousObject.Multi.Generic
Alibaba Clean
NANO-Antivirus Clean
SUPERAntiSpyware Clean
MicroWorld-eScan Gen:Variant.Bulz.375589
Ad-Aware Gen:Variant.Bulz.375589
Sophos Clean
Comodo Clean
F-Secure Clean
DrWeb Clean
Zillya Clean
TrendMicro Clean
McAfee-GW-Edition Artemis!Trojan
MaxSecure Trojan.Malware.300983.susgen
FireEye Generic.mg.1819f2525b90e042
Emsisoft Gen:Variant.Bulz.375589 (B)
SentinelOne Static AI - Malicious PE
GData Gen:Variant.Bulz.375589
Jiangmin Clean
Webroot Clean
Avira Clean
MAX malware (ai score=99)
Antiy-AVL Trojan/Generic.ASMalwS.30F8AEA
Kingsoft Win32.Troj.Generic_a.a.(kcloud)
Gridinsoft Trojan.Win32.Agent.oa
Arcabit Trojan.Bulz.D5BB25
ViRobot Clean
ZoneAlarm UDS:DangerousObject.Multi.Generic
Microsoft Trojan:Win32/Wacatac.B!ml
AhnLab-V3 Clean
Acronis Clean
McAfee Artemis!1819F2525B90
TACHYON Clean
VBA32 Clean
Malwarebytes Malware.AI.3893851510
Panda Clean
Zoner Clean
TrendMicro-HouseCall TROJ_GEN.R002H09FB21
Rising Clean
Yandex Clean
Ikarus Clean
eGambit Clean
Fortinet Clean
BitDefenderTheta Gen:NN.ZemsilF.34738.am1@aSJIczd
Cybereason malicious.25b90e
Avast Clean
Qihoo-360 Clean
No IRMA results available.