× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: 3eb914bc0d01472d4eff05fd83f7fb84bd1598dd54a2dec70d81329b58af3318
File name: uuionm.exe
Detection ratio: 32 / 45
Analysis date: 2013-02-21 01:57:31 UTC ( 5 years, 4 months ago )
Antivirus Result Update
Yandex Trojan.Injector!k+qlutdPk68 20130220
AntiVir TR/Crypt.XPACK.Gen7 20130221
Avast Win32:Crypt-OVO [Trj] 20130221
AVG Crypt_s.ADZ 20130221
BitDefender Gen:Variant.Kazy.134248 20130221
CAT-QuickHeal Backdoor.ZAccess.baty 20130220
Comodo TrojWare.Win32.PWS.ZBot.ATA 20130221
DrWeb Trojan.DownLoader7.53807 20130221
ESET-NOD32 a variant of Win32/Injector.ABDZ 20130220
F-Secure Gen:Variant.Kazy.134248 20130221
Fortinet W32/Zbot.AQV!tr 20130221
GData Gen:Variant.Kazy.134248 20130221
Ikarus Trojan.Win32.Sirefef 20130221
K7AntiVirus Riskware 20130220
Kaspersky Backdoor.Win32.ZAccess.baty 20130220
Kingsoft Win32.Troj.Agent.a.(kcloud) 20130204
Malwarebytes Trojan.Agent 20130220
McAfee ZeroAccess-FAVR! 20130221
McAfee-GW-Edition Heuristic.BehavesLike.Win32.Suspicious-DTR.K 20130220
Microsoft Trojan:Win32/Sirefef.P 20130220
eScan Gen:Variant.Kazy.134248 20130221
Norman Suspicious_Gen5.KGSG 20130220
nProtect Backdoor/W32.ZAccess.191488.P 20130220
Panda Generic Trojan 20130220
PCTools Trojan.Gen 20130219
Sophos AV Troj/ZAccess-BO 20130221
Symantec Trojan.Gen.2 20130221
TheHacker Trojan/Injector.abdz 20130219
TrendMicro TROJ_SPNR.15BD13 20130221
TrendMicro-HouseCall TROJ_SPNR.15BD13 20130221
VBA32 Backdoor.ZAccess.bbia 20130220
VIPRE Trojan.Win32.FakeAV.af (v) 20130221
Antiy-AVL 20130220
ByteHero 20130218
ClamAV 20130221
Commtouch 20130220
Emsisoft 20130221
eSafe 20130211
F-Prot 20130220
Jiangmin 20130220
NANO-Antivirus 20130221
Rising 20130205
SUPERAntiSpyware 20130221
TotalDefense 20130220
ViRobot 20130220
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Nerecertime INC. (c) 2012

Publisher Nerecertime INC.
Product Nerecertime INC.
Original name uuionm.exe
Internal name uuionm
File version a 4 RC197.60727017.2436
Description Nerecertime INC.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2012-12-11 15:35:42
Entry Point 0x000014FA
Number of sections 5
PE sections
PE imports
CredDeleteA
OsThunkD3dContextCreate
DirectPlay8Create
SetPriorityClass
SwitchToThread
VirtualAllocEx
TerminateThread
ExitProcess
Sleep
GetThreadContext
wglCopyContext
wglGetCurrentDC
MonitorFromPoint
EnumChildWindows
PE exports
Number of PE resources by type
RT_STRING 4
RT_VERSION 1
Number of PE resources by language
NEUTRAL 5
ExifTool file metadata
SubsystemVersion
4.0

LinkerVersion
5.33

ImageVersion
1.0

FileSubtype
0

FileVersionNumber
1.0.3.69

UninitializedDataSize
0

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

CharacterSet
Unicode

InitializedDataSize
187904

FileOS
Win32

MIMEType
application/octet-stream

LegalCopyright
Nerecertime INC. 2012

FileVersion
a 4 RC197.60727017.2436

TimeStamp
2012:12:11 15:35:42+00:00

FileType
Win32 EXE

PEType
PE32

InternalName
uuionm

ProductVersion
993.21010 RelC

FileDescription
Nerecertime INC.

OSVersion
4.0

OriginalFilename
uuionm.exe

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
Nerecertime INC.

CodeSize
2560

ProductName
Nerecertime INC.

ProductVersionNumber
3.0.101.3

EntryPoint
0x14fa

ObjectFileType
Executable application

File identification
MD5 ac91753182db3a9562a27bd78c95972e
SHA1 ffe08b8c36bce2c8846bf9b4f9d369c473cfa4b0
SHA256 3eb914bc0d01472d4eff05fd83f7fb84bd1598dd54a2dec70d81329b58af3318
ssdeep
3072:2sUWviBwSOG8OWc8ertn9Lg2rRvyw73xnbT8q6W:nUWv6CJOWc8evawRf7p

File size 187.0 KB ( 191488 bytes )
File type Win32 EXE
Magic literal
MS-DOS executable PE for MS Windows (GUI) Intel 80386 32-bit

TrID Win32 Executable MS Visual C++ 4.x (85.8%)
Win32 Executable Generic (5.4%)
Win32 Dynamic Link Library (generic) (4.8%)
Win16/32 Executable Delphi generic (1.3%)
Generic Win/DOS Executable (1.2%)
Tags
peexe

VirusTotal metadata
First submission 2013-01-11 08:27:02 UTC ( 5 years, 6 months ago )
Last submission 2013-01-13 07:22:19 UTC ( 5 years, 6 months ago )
File names ac91753182db3a9562a27bd78c95972e
KkU9.rar
AC91753182DB3A9562A27BD78C95972E_sirefef.exe
HZ1Ac80.dotm
o93odx1.exe
uuionm.exe
Sensor2_Sensor2_eth2_20130110-184025_0354.exe
uuionm
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!