| SHA256: | 2408c60874c6ee1ac54f1625c8a9498d0546881cdd59046ae712eb4092ea3d13 |
| File name: | YhPzp4xCEl4kBTGsX.exe |
| Detection ratio: | 19 / 68 |
| Analysis date: | 2018-06-07 10:47:34 UTC ( 8 months, 1 week ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| AhnLab-V3 | Win-Trojan/Emotet.Exp | 20180606 |
| Avast | FileRepMalware | 20180607 |
| AVG | FileRepMalware | 20180607 |
| Baidu | Win32.Trojan.WisdomEyes.16070401.9500.9997 | 20180607 |
| CrowdStrike Falcon (ML) | malicious_confidence_90% (D) | 20180530 |
| Cybereason | malicious.8f9114 | 20180225 |
| Cylance | Unsafe | 20180607 |
| Cyren | W32/Emotet.BS.gen!Eldorado | 20180607 |
| Endgame | malicious (high confidence) | 20180507 |
| F-Prot | W32/Emotet.BS.gen!Eldorado | 20180607 |
| Ikarus | Trojan-Banker.Emotet | 20180607 |
| Sophos ML | heuristic | 20180601 |
| Malwarebytes | Trojan.Emotet | 20180607 |
| McAfee | Emotet-FDM!DE2D6937634D | 20180607 |
| Palo Alto Networks (Known Signatures) | generic.ml | 20180607 |
| Qihoo-360 | HEUR/QVM20.1.AEE7.Malware.Gen | 20180607 |
| SentinelOne (Static ML) | static engine - malicious | 20180225 |
| Symantec | ML.Attribute.HighConfidence | 20180607 |
| VBA32 | BScope.TrojanBanker.Emotet | 20180607 |
| Ad-Aware | 20180607 | |
| AegisLab | 20180607 | |
| Alibaba | 20180607 | |
| ALYac | 20180607 | |
| Antiy-AVL | 20180607 | |
| Arcabit | 20180607 | |
| Avast-Mobile | 20180607 | |
| Avira (no cloud) | 20180607 | |
| AVware | 20180607 | |
| Babable | 20180406 | |
| BitDefender | 20180607 | |
| Bkav | 20180607 | |
| CAT-QuickHeal | 20180607 | |
| ClamAV | 20180607 | |
| CMC | 20180607 | |
| Comodo | 20180607 | |
| DrWeb | 20180607 | |
| eGambit | 20180607 | |
| Emsisoft | 20180607 | |
| ESET-NOD32 | 20180607 | |
| F-Secure | 20180607 | |
| Fortinet | 20180607 | |
| GData | 20180607 | |
| Jiangmin | 20180607 | |
| K7AntiVirus | 20180607 | |
| K7GW | 20180607 | |
| Kaspersky | 20180607 | |
| Kingsoft | 20180607 | |
| MAX | 20180607 | |
| McAfee-GW-Edition | 20180607 | |
| Microsoft | 20180607 | |
| eScan | 20180607 | |
| NANO-Antivirus | 20180607 | |
| Panda | 20180606 | |
| Rising | 20180607 | |
| Sophos AV | 20180607 | |
| SUPERAntiSpyware | 20180607 | |
| Symantec Mobile Insight | 20180605 | |
| TACHYON | 20180607 | |
| Tencent | 20180607 | |
| TheHacker | 20180606 | |
| TotalDefense | 20180607 | |
| TrendMicro | 20180607 | |
| TrendMicro-HouseCall | 20180607 | |
| Trustlook | 20180607 | |
| VIPRE | 20180607 | |
| ViRobot | 20180607 | |
| Webroot | 20180607 | |
| Yandex | 20180529 | |
| Zillya | 20180606 | |
| ZoneAlarm by Check Point | 20180607 | |
| Zoner | 20180606 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright 2016 The Apache Software Foundation.
Product Apache HTTP Server
Original name htdigest.exe
Internal name htdigest.exe
File version 2.4.23
Description Apache htdigest command line utility
Comments Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2018-06-07 10:40:12
Entry Point 0x0000100F
Number of sections 7
PE sections
PE imports
Number of PE resources by type
RT_MANIFEST 1
RT_VERSION 1
Number of PE resources by language
ENGLISH US 2
PE resources
Debug information
ExifTool file metadata
UninitializedDataSize
0
LinkerVersion
12.0
ImageVersion
0.0
FileSubtype
0
FileVersionNumber
2.4.23.0
LanguageCode
English (U.S.)
FileFlagsMask
0x003f
FileDescription
Apache htdigest command line utility
ImageFileCharacteristics
Executable, 32-bit
CharacterSet
Unicode
InitializedDataSize
157696
EntryPoint
0x100f
OriginalFileName
htdigest.exe
MIMEType
application/octet-stream
LegalCopyright
Copyright 2016 The Apache Software Foundation.
FileVersion
2.4.23
TimeStamp
2018:06:07 12:40:12+02:00
FileType
Win32 EXE
PEType
PE32
InternalName
htdigest.exe
ProductVersion
2.4.23
SubsystemVersion
5.0
OSVersion
5.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Apache Software Foundation
CodeSize
0
ProductName
Apache HTTP Server
ProductVersionNumber
2.4.23.0
FileTypeExtension
exe
ObjectFileType
Executable application
Compressed bundles
File identification
MD5 de2d6937634d9924bb10c7d252a9bbf3
SHA1 a5ef1fa8f9114cebac3089c2aab4a93b00f978ac
SHA256 2408c60874c6ee1ac54f1625c8a9498d0546881cdd59046ae712eb4092ea3d13
ssdeep
1536:TjAEXqG2/sUYBzP3zDITrYqlVtU58Fg2Jcq8:TjPaG2/23Pw0atU58a2A
File size
244.0 KB ( 249856 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
OS/2 Executable (generic) (33.6%) Generic Win/DOS Executable (33.1%) DOS Executable Generic (33.1%) |
Tags
peexe
VirusTotal metadata
First submission
2018-06-07 10:47:34 UTC ( 8 months, 1 week ago )
Last submission
2018-09-14 02:17:04 UTC ( 5 months ago )
| File names |
13976.exe 32501.exe 7352.exe output.113402611.txt 73167.exe htdigest.exe de2d6937634d9924bb10c7d252a9bbf3_exe 78534.exe 80615.exe 33786.exe 75147.exe 3786.exe 76579.exe 4950.exe (15)(4).exe 63258.exe 54076.exe YhPzp4xCEl4kBTGsX.exe 9339.exe 65970.exe 75277.exe |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!