VT Community Sign in ▼ Languages ▼
VirusTotal's website has changed, we need new translations, do you feel like helping the community?
Sign in to VT Community

Safety ratings and user comments (disinfection, in-the-wild locations, reverse engineering reports, etc.) on malware and URLs, free and easy.

email
password
Keep me logged in
Forgot your password? Create an account
0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is goodware. 0 VT Community user(s) with a total of 0 reputation credit(s) say(s) this sample is malware.
File name:
imglog.jpg
Submission date:
2009-06-15 15:07:30 (UTC)
Current status:
finished
Result:
20 /38 (52.6%)
VT Community

not reviewed
 Safety score: - 
Antivirus Version Last Update Result
a-squared 4.5.0.18 2009.06.15 Trojan-Banker.Win32.Banker!IK
AhnLab-V3 5.0.0.2 2009.06.15 Win32/MalPackedB.suspicious
AntiVir 7.9.0.187 2009.06.15 TR/Crypt.NSPM.Gen
Antiy-AVL 2.0.3.1 2009.06.15 -
Authentium 5.1.2.4 2009.06.14 W32/Trojan-Gypikon-based.DE!Maximus
Avast 4.8.1335.0 2009.06.14 -
AVG 8.5.0.339 2009.06.15 -
BitDefender 7.2 2009.06.15 Generic.Banker.Delf.FEAF23DC
CAT-QuickHeal 10.00 2009.06.15 -
ClamAV 0.94.1 2009.06.15 -
Comodo 1335 2009.06.15 -
DrWeb 5.0.0.12182 2009.06.15 -
eSafe 7.0.17.0 2009.06.15 Win32.TRCrypt.Nspm
eTrust-Vet 31.6.6556 2009.06.12 -
F-Prot 4.4.4.56 2009.06.14 W32/Trojan-Gypikon-based.DE!Maximus
Fortinet 3.117.0.0 2009.06.15 -
GData 19 2009.06.15 Generic.Banker.Delf.FEAF23DC
Ikarus T3.1.1.59.0 2009.06.15 Trojan-Banker.Win32.Banker
K7AntiVirus 7.10.762 2009.06.12 -
Kaspersky 7.0.0.125 2009.06.15 Trojan-Banker.Win32.Banker.sdu
McAfee 5646 2009.06.14 -
McAfee+Artemis 5646 2009.06.14 -
McAfee-GW-Edition 6.7.6 2009.06.15 Trojan.Crypt.NSPM.Gen
Microsoft 1.4701 2009.06.15 TrojanSpy:Win32/Bancos.gen!B
NOD32 4154 2009.06.15 -
NOD32Beta 4154 2009.06.15 probably a variant of Win32/Statik
Norman 6.01.09 2009.06.15 Agent.IZEO
nProtect 2009.1.8.0 2009.06.15 -
Panda 10.0.0.14 2009.06.14 Suspicious file
PCTools 4.4.2.0 2009.06.12 -
Prevx 3.0 2009.06.15 High Risk Cloaked Malware
Rising 21.34.04.00 2009.06.15 Packer.Win32.Mian007.a
Sophos 4.42.0 2009.06.15 Mal/EncPk-DM
Sunbelt 3.2.1858.2 2009.06.14 -
Symantec 1.4.4.12 2009.06.15 Packed.Generic.138
TheHacker 6.3.4.3.345 2009.06.13 -
TrendMicro 8.950.0.1092 2009.06.15 Mal_Banker
VBA32 3.12.10.7 2009.06.14 suspected of Trojan-Spy.xBank.51
ViRobot 2009.6.15.1787 2009.06.15 -
Additional information
MD5   : 057bf3310a87012070988489a5ddea46
SHA1  : bf5209e2eb75a7a4755d2769e5d029648520d5d2
SHA256: 8a13f7f6382579a793cff11aa864bbbd602a975e590b664d9896fd690104e865
ssdeep: 49152:MXBCV5d9ZnFIzF3ueKIEybx8uzeZCmHV8T+mr:YB89Fc3uePdPejHVQ+mr
File size : 1757217 bytes
First seen: 2009-06-15 10:22:30
Last seen : 2009-06-23 14:16:34
Magic: PE32 executable for MS Windows (GUI) Intel 80386 32-bit
TrID:
Win32 Executable Generic (42.3%)[*lb*]Win32 Dynamic Link Library (generic) (37.6%)[*lb*]Generic Win/DOS Executable (9.9%)[*lb*]DOS Executable Generic (9.9%)[*lb*]VXD Driver (0.1%)
PEiD: -
packers (Kaspersky): XComp
PEInfo: PE structure information

[[ basic data ]]
entrypointaddress: 0xA6B000
timedatestamp....: 0x2A425E19 (Fri Jun 19 22:22:17 1992)
machinetype......: 0x14C (Intel I386)

[[ 3 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
.XPack0, 0x1000, 0x133000, 0x0, 0.0, d41d8cd98f00b204e9800998ecf8427e
.rsrc, 0x134000, 0x937000, 0x4200, 4.63, de4431d650070ff427bcc0a0f4fc720e
.XPack, 0xA6B000, 0x1A8C21, 0x1A8C21, 8.0, 95f929230c48509820d387363c8e8745

[[ 1 import(s) ]]
kernel32.dll: GetProcAddress, LoadLibraryA, VirtualProtect
Prevx Info:
http://info.prevx.com/aboutprogramtext.asp?PX5=302CF6882190D5A7D0F01ABEDFDF1100AA36FE0B
ThreatExpert:
http://www.threatexpert.com/report.aspx?md5=057bf3310a87012070988489a5ddea46

VT Community

This file has never been reviewed by any VT Community member. Be the first one to comment on it!
VirusTotal Team
Add your comment... Remember that when you write comments as an anonymous user they receive the lowest possible reputation. So if you have not signed in yet don't forget to do so. How to markup your comments?
You can add basic styles to your comments using the following accepted bbcode tags:

[b]text[/b] -- bold
[i]text[/i] -- italics
[u]text[/u] -- underline
[s]text[/s] -- strikethrough
[code]text[/code] - preformatted text

You can also address comments to particular users using the "@" twitter-like mode. By prepending a "#" symbol to a word you can add custom tags to your comment, tags that can then be searched for.
Goodware
Malware
Spam attachment/link

P2P download
Propagating via IM
Network worm

Drive-by-download






ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.