| SHA256: | 08c0bcbacc85d61ba29565fdb116a98f430ec4ffdfdbe4932a27c12d3bca5f34 |
| File name: | unpacked_08c0bcbacc85d61ba29565fdb116a98f430ec4ffdfdbe4932a27c12d... |
| Detection ratio: | 29 / 55 |
| Analysis date: | 2016-03-15 15:59:08 UTC ( 2 years, 11 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Ad-Aware | Gen:Variant.Kazy.163246 | 20160315 |
| Yandex | Packed/Upack!Dump | 20160314 |
| AhnLab-V3 | Trojan/Win32.OnlineGameHack | 20160315 |
| Antiy-AVL | Trojan[GameThief]/Win32.WOW.gic | 20160315 |
| Arcabit | Trojan.Kazy.D27DAE | 20160315 |
| Avast | Win32:Evo-gen [Susp] | 20160315 |
| AVG | Corrupted | 20160315 |
| Avira (no cloud) | TR/Patched.Ren.Gen | 20160315 |
| AVware | LooksLike.Win32.KryptPck!a (v) | 20160315 |
| BitDefender | Gen:Variant.Kazy.163246 | 20160315 |
| CAT-QuickHeal | (Suspicious) - DNAScan | 20160314 |
| Comodo | TrojWare.Win32.Trojan.Inject.~II | 20160315 |
| Emsisoft | Gen:Variant.Kazy.163246 (B) | 20160315 |
| ESET-NOD32 | a variant of Win32/Zlader.L | 20160315 |
| F-Secure | Gen:Variant.Kazy.163246 | 20160315 |
| GData | Gen:Variant.Kazy.163246 | 20160315 |
| Ikarus | Trojan-Spy.Win32.Banker | 20160315 |
| K7AntiVirus | Trojan ( 003b1b581 ) | 20160315 |
| K7GW | Trojan ( 003b1b581 ) | 20160315 |
| McAfee-GW-Edition | BehavesLike.Win32.Downloader.lt | 20160315 |
| Microsoft | TrojanDownloader:Win32/Skidlo.gen!A | 20160315 |
| eScan | Gen:Variant.Kazy.163246 | 20160315 |
| NANO-Antivirus | Virus.Win32.Gen.ccmw | 20160315 |
| Panda | Trj/Genetic.gen | 20160315 |
| Qihoo-360 | QVM39.1.Malware.Gen | 20160315 |
| Sophos AV | Mal/EncPk-BW | 20160315 |
| TrendMicro | Cryp_Xed-12 | 20160315 |
| TrendMicro-HouseCall | Cryp_Xed-12 | 20160315 |
| VIPRE | LooksLike.Win32.KryptPck!a (v) | 20160315 |
| AegisLab | 20160315 | |
| Alibaba | 20160315 | |
| Baidu | 20160315 | |
| Baidu-International | 20160315 | |
| Bkav | 20160315 | |
| ByteHero | 20160315 | |
| ClamAV | 20160311 | |
| CMC | 20160314 | |
| Cyren | 20160315 | |
| DrWeb | 20160315 | |
| F-Prot | 20160315 | |
| Fortinet | 20160315 | |
| Jiangmin | 20160315 | |
| Kaspersky | 20160315 | |
| Malwarebytes | 20160315 | |
| McAfee | 20160315 | |
| nProtect | 20160315 | |
| Rising | 20160315 | |
| SUPERAntiSpyware | 20160315 | |
| Symantec | 20160315 | |
| Tencent | 20160315 | |
| TheHacker | 20160314 | |
| VBA32 | 20160315 | |
| ViRobot | 20160315 | |
| Zillya | 20160315 | |
| Zoner | 20160315 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 DLL
file
for the Windows GUI subsystem.
FileVersionInfo properties
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1970-01-01 01:08:16
Entry Point 0x00005A52
Number of sections 2
PE sections
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
FileTypeExtension
dll
TimeStamp
1970:01:01 02:08:16+01:00
FileType
Win32 DLL
PEType
PE32
CodeSize
19456
LinkerVersion
0.58
ImageFileCharacteristics
Executable, No line numbers, No symbols, 32-bit, DLL
Warning
Error processing PE data dictionary
EntryPoint
0x5a52
InitializedDataSize
3072
SubsystemVersion
4.0
ImageVersion
0.0
OSVersion
4.0
UninitializedDataSize
0
File identification
MD5 93aec7bd7643bd188fbaa35ca48f9ca8
SHA1 68742c064b6c0b86aa5db647e697a90bcdfe1d7b
SHA256 08c0bcbacc85d61ba29565fdb116a98f430ec4ffdfdbe4932a27c12d3bca5f34
ssdeep
768:UYHugbsb/NBkSgA8aC0e6sP/H6z65I9H/FvlDT4eaYXFKf/R7c+lyz/6+aMn8WIh:U4SRBe69fY0FK3R7eQZ
File size
76.0 KB ( 77824 bytes )
File type Win32 DLL
Magic literal
PE32 executable for MS Windows (DLL) (GUI) Intel 80386 32-bit
| TrID |
DOS Executable Generic (100.0%) |
Tags
pedll
VirusTotal metadata
First submission
2016-03-15 15:59:08 UTC ( 2 years, 11 months ago )
Last submission
2019-01-20 00:11:37 UTC ( 4 weeks ago )
| File names |
08c0bcbacc85d61ba29565fdb116a98f430ec4ffdfdbe4932a27c12d3bca5f34.bin unpacked_08c0bcbacc85d61ba29565fdb116a98f430ec4ffdfdbe4932a27c12d3bca5f34 |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!