Srpski | Македонски | العربية | Suomi | ihMdI | | עברית | | Slovenščina | Dansk | Русский | Română | Türkçe | Nederlands | Ελληνικά | Français | Svenska | Português | Italiano | | | Magyar | Deutsch | Česky | Polski | Español
Virus Total

Virustotal is a service that analyzes suspicious files and facilitates the quick detection of viruses, worms, trojans, and all kinds of malware detected by antivirus engines. More information...

File slosa8nn.exe received on 2009.10.31 13:52:53 (UTC)
Current status: finished
Result: 20/41 (48.78%)
Antivirus Version Last Update Result
a-squared 4.5.0.41 2009.10.31 -
AhnLab-V3 5.0.0.2 2009.10.30 -
AntiVir 7.9.1.53 2009.10.30 TR/Downloader.Gen
Antiy-AVL 2.0.3.7 2009.10.30 -
Authentium 5.1.2.4 2009.10.31 W32/VB-Backdoor-PEK-based!Maximus
Avast 4.8.1351.0 2009.10.30 Win32:Malware-gen
AVG 8.5.0.423 2009.10.31 -
BitDefender 7.2 2009.10.31 -
CAT-QuickHeal 10.00 2009.10.31 -
ClamAV 0.94.1 2009.10.31 -
Comodo 2792 2009.10.31 -
DrWeb 5.0.0.12182 2009.10.31 Trojan.DownLoad.58491
eSafe 7.0.17.0 2009.10.29 -
eTrust-Vet 35.1.7094 2009.10.30 -
F-Prot 4.5.1.85 2009.10.31 W32/VB-Backdoor-PEK-based!Maximus
F-Secure 9.0.15370.0 2009.10.30 -
Fortinet 3.120.0.0 2009.10.31 -
GData 19 2009.10.31 Win32:Malware-gen
Ikarus T3.1.1.72.0 2009.10.31 Trojan-Dropper.Agent
Jiangmin 11.0.800 2009.10.31 -
K7AntiVirus 7.10.884 2009.10.30 Trojan.Win32.Malware.1
Kaspersky 7.0.0.125 2009.10.31 Trojan-Downloader.Win32.Genome.vvc
McAfee 5787 2009.10.30 -
McAfee+Artemis 5787 2009.10.30 Artemis!45B2E241BFE8
McAfee-GW-Edition 6.8.5 2009.10.31 Trojan.Downloader.Gen
Microsoft 1.5202 2009.10.31 TrojanDownloader:Win32/Adload.BG
NOD32 4560 2009.10.31 probably a variant of Win32/TrojanDownloader.Agent.AMWD
Norman 6.03.02 2009.10.31 VBTroj.BRLN.dropper
nProtect 2009.1.8.0 2009.10.31 Trojan/W32.Agent.385927
Panda 10.0.2.2 2009.10.31 Trj/CI.A
PCTools 7.0.3.5 2009.10.30 Trojan.Generic
Prevx 3.0 2009.10.31 -
Rising 21.53.52.00 2009.10.31 -
Sophos 4.47.0 2009.10.31 Mal/Generic-A
Sunbelt 3.2.1858.2 2009.10.30 Backdoor.Win32.VB.PEK!cobra (v)
Symantec 1.4.4.12 2009.10.31 Trojan Horse
TheHacker 6.5.0.2.056 2009.10.28 -
TrendMicro 8.950.0.1094 2009.10.31 -
VBA32 3.12.10.11 2009.10.30 -
ViRobot 2009.10.31.2015 2009.10.31 -
VirusBuster 4.6.5.0 2009.10.30 -
Additional information
File size: 385927 bytes
MD5   : 45b2e241bfe80d57864159fa84128415
SHA1  : bcbc4c4aabb8c59f9d5e50a8fce34186aa737960
SHA256: 81f8aa116eab67db2aded442944c344f1aa324dff209123a4c75104f62c932ae
PEInfo: PE Structure information

( base data )
entrypointaddress.: 0x21AF
timedatestamp.....: 0x3BD86C3F (Thu Oct 25 21:47:11 2001)
machinetype.......: 0x14C (Intel I386)

( 4 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x2126 0x2200 6.19 c71643c087e2557d0b1d36c694eccccf
.rdata 0x4000 0x779 0x800 4.78 d026ce795e3c5fa0e2c0bce1de427a45
.data 0x5000 0x478 0x400 3.96 c7c41671d08e5cd17ae9b12731e3de24
.rsrc 0x6000 0x640 0x800 2.79 31d820a7192237325734910bcf1f7287

( 4 imports )

> advapi32.dll: OpenProcessToken, AdjustTokenPrivileges, LookupPrivilegeValueA
> gdi32.dll: DeleteObject, GetStockObject, GetDeviceCaps, PatBlt, CreateSolidBrush, TextOutA, SetTextColor, SetBkMode, SelectObject, StretchDIBits, CreateFontA, RealizePalette, SelectPalette, CreatePalette
> kernel32.dll: lstrcpyA, GetCommandLineA, SetErrorMode, lstrlenA, MulDiv, GetTempFileNameA, GetWindowsDirectoryA, GetModuleFileNameA, GetModuleHandleA, FormatMessageA, lstrcatA, GetLastError, _lwrite, _llseek, GlobalUnlock, _lopen, GlobalAlloc, GlobalFree, _lclose, _lcreat, LoadLibraryA, GetProcAddress, FreeLibrary, OpenFile, GetVersionExA, GetCurrentProcess, WinExec, ExitProcess, _lread, LocalFree, GetTempPathA, GlobalLock
> user32.dll: GetDC, BeginPaint, EndPaint, InvalidateRect, PostQuitMessage, SendMessageA, DefWindowProcA, GetClientRect, CreateWindowExA, DrawTextA, ReleaseDC, ShowWindow, SetWindowPos, UpdateWindow, SetTimer, LoadIconA, wsprintfA, MessageBoxA, ExitWindowsEx, RegisterClassA, LoadCursorA

( 1 exports )

> _MainWndProc@16, _StubFileWrite@12
TrID  : File type identification
Wise Installer executable (88.1%)
Win64 Executable Generic (9.5%)
Win32 Executable Generic (0.9%)
Win32 Dynamic Link Library (generic) (0.8%)
Generic Win/DOS Executable (0.2%)
ThreatExpert: http://www.threatexpert.com/report.aspx?md5=45b2e241bfe80d57864159fa84128415
ssdeep: 6144:b44JDvFeKBw8v92A7BB5RExQJdrO6SeNvF/QqvcoHVxx2GKNo5s/EfH/P6:v1Bv/HExQJdrO6Sc7ce/2poCMy
Prevx Info: http://info.prevx.com/aboutprogramtext.asp?PX5=3F725D7F870B04F4E367056C83852300563A43BB
PEiD  : -
packers (F-Prot): ZIP, nameless
packers (Authentium): ZIP, ZIP
RDS   : NSRL Reference Data Set
-

ATENTION ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

Scan another file