| SHA256: | 4a936f552009683b4dcf10284dc01c1a2c576a47c165c07c3eefdd747d891ee4 |
| File name: | 4A936F552009683B4DCF10284DC01C1A2C576A47C165C07C3EEFDD747D891EE4 |
| Detection ratio: | 31 / 69 |
| Analysis date: | 2019-01-15 05:43:09 UTC ( 1 month ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Acronis | suspicious | 20190111 |
| Ad-Aware | Gen:Variant.Mikey.73843 | 20190114 |
| ALYac | Gen:Variant.Mikey.73843 | 20190114 |
| Arcabit | Trojan.Mikey.D12073 | 20190114 |
| Avast | FileRepMalware | 20190114 |
| AVG | FileRepMalware | 20190114 |
| Avira (no cloud) | TR/ATRAPS.Gen | 20190114 |
| BitDefender | Gen:Variant.Mikey.73843 | 20190114 |
| CAT-QuickHeal | Trojan.Emotet.X4 | 20190114 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (D) | 20181023 |
| Cybereason | malicious.74bf60 | 20190109 |
| Emsisoft | Gen:Variant.Mikey.73843 (B) | 20190114 |
| Endgame | malicious (high confidence) | 20181108 |
| F-Secure | Gen:Variant.Mikey.73843 | 20190114 |
| GData | Gen:Variant.Mikey.73843 | 20190114 |
| Sophos ML | heuristic | 20181128 |
| Kaspersky | UDS:DangerousObject.Multi.Generic | 20190114 |
| MAX | malware (ai score=96) | 20190115 |
| McAfee | Artemis!1E54B5974BF6 | 20190114 |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.dh | 20190114 |
| Microsoft | Trojan:Win32/Emotet.AC!bit | 20190114 |
| eScan | Gen:Variant.Mikey.73843 | 20190114 |
| NANO-Antivirus | Virus.Win32.Gen.ccmw | 20190114 |
| Palo Alto Networks (Known Signatures) | generic.ml | 20190115 |
| Qihoo-360 | HEUR/QVM19.1.8E59.Malware.Gen | 20190115 |
| Rising | Trojan.Emotet!8.B95 (TFE:dGZlOgKywrSCGyBMag) | 20190115 |
| SentinelOne (Static ML) | static engine - malicious | 20181223 |
| Symantec | ML.Attribute.HighConfidence | 20190115 |
| Trapmine | malicious.high.ml.score | 20190103 |
| Webroot | W32.Trojan.Emotet | 20190115 |
| ZoneAlarm by Check Point | UDS:DangerousObject.Multi.Generic | 20190115 |
| AegisLab | 20190114 | |
| AhnLab-V3 | 20190114 | |
| Alibaba | 20180921 | |
| Antiy-AVL | 20190114 | |
| Avast-Mobile | 20190114 | |
| Babable | 20180918 | |
| Baidu | 20190114 | |
| Bkav | 20190108 | |
| ClamAV | 20190114 | |
| CMC | 20190114 | |
| Comodo | 20190114 | |
| Cyren | 20190114 | |
| DrWeb | 20190114 | |
| eGambit | 20190115 | |
| ESET-NOD32 | 20190114 | |
| F-Prot | 20190114 | |
| Fortinet | 20190114 | |
| Ikarus | 20190114 | |
| Jiangmin | 20190114 | |
| K7AntiVirus | 20190114 | |
| K7GW | 20190114 | |
| Kingsoft | 20190115 | |
| Malwarebytes | 20190114 | |
| Panda | 20190114 | |
| Sophos AV | 20190115 | |
| SUPERAntiSpyware | 20190109 | |
| TACHYON | 20190115 | |
| Tencent | 20190115 | |
| TheHacker | 20190115 | |
| TrendMicro | 20190115 | |
| TrendMicro-HouseCall | 20190115 | |
| Trustlook | 20190115 | |
| VBA32 | 20190115 | |
| VIPRE | 20190115 | |
| ViRobot | 20190115 | |
| Yandex | 20190111 | |
| Zillya | 20190115 | |
| Zoner | 20190114 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2019-01-15 05:00:23
Entry Point 0x00002E6F
Number of sections 4
PE sections
PE imports
Number of PE resources by type
RT_STRING 1
Number of PE resources by language
ENGLISH US 1
PE resources
Debug information
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
FileTypeExtension
exe
TimeStamp
2019:01:15 06:00:23+01:00
FileType
Win32 EXE
PEType
PE32
CodeSize
15360
LinkerVersion
12.0
ImageFileCharacteristics
No relocs, Executable, 32-bit
EntryPoint
0x2e6f
InitializedDataSize
201216
SubsystemVersion
4.0
ImageVersion
0.0
OSVersion
5.1
UninitializedDataSize
0
File identification
MD5 1e54b5974bf6073e2d8c5e4cb2d4f729
SHA1 70ab248e0cee6fed252683d45d4715e749fa26cd
SHA256 4a936f552009683b4dcf10284dc01c1a2c576a47c165c07c3eefdd747d891ee4
ssdeep
1536:Io4p+XKhlQ1xVTuw7wR1todJlVGOVlPsoB2q6bU2ySWWy+6kmGB0JQ6bAhIET552:+O1314+n+q2q0ySL6ksJQ6+IE7
File size
212.5 KB ( 217600 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable MS Visual C++ (generic) (41.0%) Win64 Executable (generic) (36.3%) Win32 Dynamic Link Library (generic) (8.6%) Win32 Executable (generic) (5.9%) OS/2 Executable (generic) (2.6%) |
Tags
peexe
VirusTotal metadata
First submission
2019-01-15 05:10:40 UTC ( 1 month ago )
Last submission
2019-01-16 04:15:03 UTC ( 1 month ago )
| File names |
oKdpt_ut.exe pT_rZW0pkshh.exe NHZQg_y_4uEJW.exe nHQdwAD_A_6tSG.exe 3lcPwx_krDMgbmE_OcV.exe emotet_e2_4a936f552009683b4dcf10284dc01c1a2c576a47c165c07c3eefdd747d891ee4_2019-01-15__051001.exe_ kUr3T2IU_Dvfx.exe piOen_xL1r.exe |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!