| SHA256: | 0af32e00e57d8af4119d43044915efbe248c24bce41eba0460c8ac77e21e6bb9 |
| File name: | 65b16d40f024b5c1cf8676dc1c252d56 |
| Detection ratio: | 40 / 48 |
| Analysis date: | 2014-07-18 13:40:24 UTC ( 4 years, 3 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Ad-Aware | Trojan.AutoIT.Injector.AN | 20140718 |
| Yandex | Trojan.Agent!uGdZhD9+NuU | 20140718 |
| AhnLab-V3 | Trojan/Win32.Zbot | 20140718 |
| AntiVir | TR/Spy.A.5797 | 20140718 |
| Antiy-AVL | Trojan[:HEUR]/Win32.AGeneric | 20140718 |
| Avast | Win32:Zbot-OAM [Trj] | 20140718 |
| AVG | Zbot.KXP | 20140718 |
| BitDefender | Trojan.AutoIT.Injector.AN | 20140718 |
| CAT-QuickHeal | TrojanPWS.Zbot.Y3 | 20140718 |
| ClamAV | Trojan.Spy.Zbot-142 | 20140717 |
| CMC | Packed.Win32.Toggaf.4!O | 20140717 |
| Commtouch | W32/Zbot.BR.gen!Eldorado | 20140718 |
| Comodo | TrojWare.Win32.Kazy.MKD | 20140718 |
| DrWeb | Trojan.PWS.Panda.655 | 20140718 |
| Emsisoft | Trojan.AutoIT.Injector.AN (B) | 20140718 |
| ESET-NOD32 | Win32/Spy.Zbot.AAQ | 20140718 |
| F-Prot | W32/Zbot.BR.gen!Eldorado | 20140718 |
| F-Secure | Trojan-Spy:W32/Zbot.AVTH | 20140718 |
| Fortinet | W32/Zbot.AT!tr | 20140718 |
| GData | Trojan.AutoIT.Injector.AN | 20140718 |
| Ikarus | Trojan-Spy.Win32.Zbot | 20140718 |
| Jiangmin | TrojanSpy.Zbot.hfms | 20140718 |
| K7AntiVirus | Spyware ( 002891031 ) | 20140718 |
| K7GW | Spyware ( 002891031 ) | 20140718 |
| Kaspersky | Trojan-Spy.Win32.Zbot.sbdj | 20140718 |
| Malwarebytes | Spyware.Zbot | 20140718 |
| McAfee | PWS-Zbot.gen.ds | 20140718 |
| McAfee-GW-Edition | Heuristic.BehavesLike.Win32.Suspicious-BAY.K | 20140717 |
| eScan | Trojan.AutoIT.Injector.AN | 20140718 |
| NANO-Antivirus | Trojan.Win32.Panda.cswodz | 20140718 |
| Norman | ZBot.VAL | 20140718 |
| nProtect | Trojan/W32.Agent.141824.QP | 20140718 |
| Rising | PE:Stealer.Zbot!1.648A | 20140718 |
| Sophos AV | Troj/PWS-BSF | 20140718 |
| SUPERAntiSpyware | Trojan.Agent/Gen-Zbot | 20140718 |
| Symantec | Trojan.Zbot | 20140718 |
| TotalDefense | Win32/Zbot.CXZ | 20140718 |
| TrendMicro | TSPY_ZBOT.SMIG | 20140718 |
| TrendMicro-HouseCall | Suspicious_GEN.F47V0714 | 20140718 |
| ViRobot | Trojan.Win32.Zbot.141312.L | 20140718 |
| AegisLab | 20140718 | |
| Baidu-International | 20140718 | |
| Bkav | 20140718 | |
| ByteHero | 20140718 | |
| Kingsoft | 20140718 | |
| Tencent | 20140718 | |
| TheHacker | 20140717 | |
| Zoner | 20140718 |
The file being studied is a Portable Executable file!
More specifically, it is a DOS EXE
file.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2013-12-19 00:10:29
Entry Point 0x00013048
Number of sections 3
PE sections
Overlays
MD5 18d1e467c7ecf46f36517d2e184e1d31
File type data
Offset 141312
Size 512
Entropy 7.59
PE imports
ExifTool file metadata
FileAccessDate
2015:02:15 03:32:18+01:00
FileCreateDate
2015:02:15 03:32:18+01:00
File identification
MD5 65b16d40f024b5c1cf8676dc1c252d56
SHA1 bd0490f5f6a9633350f0cacbcc42b332a426ed31
SHA256 0af32e00e57d8af4119d43044915efbe248c24bce41eba0460c8ac77e21e6bb9
ssdeep
3072:KTqx50VJqtHGbu5XCniylWrtGA1GHvGXaCH1Fukp1P3wQGd:KTqoGtmiYlW4A1QvGXjBIQGd
File size
138.5 KB ( 141824 bytes )
File type DOS EXE
Magic literal
MS-DOS executable
| TrID |
Win32 Executable (generic) (42.5%) DOS Executable Borland Pascal 7.0x (19.2%) Generic Win/DOS Executable (18.8%) DOS Executable Generic (18.8%) VXD Driver (0.2%) |
Tags
mz
overlay
VirusTotal metadata
First submission
2014-07-14 02:52:30 UTC ( 4 years, 3 months ago )
Last submission
2015-10-08 20:16:20 UTC ( 3 years ago )
| File names |
65b16d40f024b5c1cf8676dc1c252d56.virobj 65B16D40F024B5C1CF8676DC1C252D56.exe 65b16d40f024b5c1cf8676dc1c252d56.exe 65b16d40f024b5c1cf8676dc1c252d56 2f291efd91569597f66ff0ddec10e0da8f9e8b04 bot.exe 6OnLJfM.odt virussign.com_65b16d40f024b5c1cf8676dc1c252d56.vir |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!