× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 14938d50faea37248d9a1dc74a6b2b5cbdbba8500033c5e71b92c6041c5bdb5f
File name: Rechnung.zip
Detection ratio: 18 / 42
Analysis date: 2012-05-01 08:09:33 UTC ( 6 years, 8 months ago ) View latest
Antivirus Result Update
Avast Win32:Karagany-FS [Trj] 20120501
BitDefender Trojan.Generic.KDV.612422 20120501
Commtouch W32/Trojan3.DMH 20120501
Comodo UnclassifiedMalware 20120501
DrWeb Trojan.Inject1.2568 20120501
Emsisoft Win32.Outbreak!IK 20120501
F-Secure Trojan.Generic.KDV.612422 20120501
GData Trojan.Generic.KDV.612422 20120501
Ikarus Win32.Outbreak 20120501
Kaspersky Trojan.Win32.Inject.eavr 20120501
McAfee PWS-Zbot.gen.ya 20120501
McAfee-GW-Edition Artemis!4E753199ADCD 20120430
Microsoft Trojan:Win32/Matsnu 20120501
NOD32 a variant of Win32/Injector.QUK 20120501
nProtect Trojan.Generic.KDV.612422 20120501
Panda Suspicious file 20120430
Sophos AV Mal/BredoZp-B 20120501
Symantec Trojan.FakeAV 20120501
AhnLab-V3 20120430
AntiVir 20120430
Antiy-AVL 20120501
AVG 20120430
ByteHero 20120501
CAT-QuickHeal 20120501
ClamAV 20120430
eSafe 20120430
eTrust-Vet 20120430
F-Prot 20120430
Fortinet 20120501
Jiangmin 20120501
K7AntiVirus 20120430
Norman 20120501
PCTools 20120430
Rising 20120428
SUPERAntiSpyware 20120402
TheHacker 20120428
TrendMicro 20120501
TrendMicro-HouseCall 20120430
VBA32 20120430
VIPRE 20120501
ViRobot 20120501
VirusBuster 20120501
The file being studied is a compressed stream! More specifically, it is a ZIP file.
Interesting properties
The studied file contains at least one Portable Executable.
Contained files
Compression metadata
Contained files
1
Uncompressed size
46080
Highest datetime
2012-04-30 18:49:44
Lowest datetime
2012-04-30 18:49:44
Contained files by extension
exe
1
Contained files by type
Portable Executable
1
ExifTool file metadata
MIMEType
application/zip

ZipRequiredVersion
20

ZipCRC
0x824b2363

FileType
ZIP

ZipCompression
Deflated

ZipUncompressedSize
46080

ZipCompressedSize
33873

FileTypeExtension
zip

ZipFileName
Rechnung.exe

ZipBitFlag
0

ZipModifyDate
2012:04:30 18:49:22

Compressed bundles
File identification
MD5 e6a386dc04862fca87b6f88d57278258
SHA1 d240bb2050473209bc58096e75c59cf2ed484b26
SHA256 14938d50faea37248d9a1dc74a6b2b5cbdbba8500033c5e71b92c6041c5bdb5f
ssdeep
768:VqceMn4NF8ExXEGn4Ve+eAtgRXr6lXtmvOHMQlWbi2A1N8jfTnKJmJ:VqqfExXEG4VeIt276lSQQGR1NqKJg

File size 33.2 KB ( 33995 bytes )
File type ZIP
Magic literal
Zip archive data, at least v2.0 to extract

TrID ZIP compressed archive (100.0%)
Tags
contains-pe zip

VirusTotal metadata
First submission 2012-04-30 15:44:07 UTC ( 6 years, 8 months ago )
Last submission 2015-06-09 08:44:43 UTC ( 3 years, 7 months ago )
File names Rechnung.zip.virus
ACHTUNG_VIRUS_Rechnung.zip
file-3877023_zip
1P0_.exe
virus-Rechnung.zip
virus
e6a386dc04862fca87b6f88d57278258
Rechnung.zip
aa
Advanced heuristic and reputation engines
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!