| SHA256: | 4d5770356f40bff79141d34cb9c6704ee42017438a7949d4e455c0bd1358c7e5 |
| File name: | quote.exe |
| Detection ratio: | 13 / 67 |
| Analysis date: | 2017-11-15 13:47:44 UTC ( 1 year, 5 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| BitDefender | Gen:Variant.Symmi.79831 | 20171115 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (D) | 20171016 |
| Cylance | Unsafe | 20171115 |
| Emsisoft | Gen:Variant.Symmi.79831 (B) | 20171115 |
| Endgame | malicious (high confidence) | 20171024 |
| ESET-NOD32 | Win32/PSW.Delf.ORF | 20171115 |
| Fortinet | W32/Injector.DTAI!tr | 20171115 |
| Sophos ML | heuristic | 20170914 |
| K7GW | Riskware ( 0040eff71 ) | 20171115 |
| Qihoo-360 | HEUR/QVM05.1.341B.Malware.Gen | 20171115 |
| Rising | Trojan.Injector!1.AE48 (CLASSIC) | 20171115 |
| SentinelOne (Static ML) | static engine - malicious | 20171113 |
| Sophos AV | Mal/Fareit-N | 20171115 |
| Ad-Aware | 20171115 | |
| AegisLab | 20171115 | |
| AhnLab-V3 | 20171115 | |
| Alibaba | 20170911 | |
| ALYac | 20171115 | |
| Antiy-AVL | 20171115 | |
| Arcabit | 20171115 | |
| Avast | 20171115 | |
| Avast-Mobile | 20171115 | |
| AVG | 20171115 | |
| Avira (no cloud) | 20171115 | |
| AVware | 20171115 | |
| Baidu | 20171115 | |
| Bkav | 20171115 | |
| CAT-QuickHeal | 20171114 | |
| ClamAV | 20171115 | |
| CMC | 20171109 | |
| Comodo | 20171115 | |
| Cybereason | 20171103 | |
| Cyren | 20171115 | |
| DrWeb | 20171115 | |
| eGambit | 20171115 | |
| F-Prot | 20171115 | |
| F-Secure | 20171115 | |
| GData | 20171115 | |
| Ikarus | 20171115 | |
| Jiangmin | 20171115 | |
| K7AntiVirus | 20171115 | |
| Kaspersky | 20171115 | |
| Kingsoft | 20171115 | |
| Malwarebytes | 20171115 | |
| MAX | 20171115 | |
| McAfee | 20171115 | |
| McAfee-GW-Edition | 20171115 | |
| Microsoft | 20171115 | |
| eScan | 20171115 | |
| NANO-Antivirus | 20171115 | |
| nProtect | 20171115 | |
| Palo Alto Networks (Known Signatures) | 20171115 | |
| Panda | 20171115 | |
| SUPERAntiSpyware | 20171115 | |
| Symantec | 20171115 | |
| Symantec Mobile Insight | 20171115 | |
| Tencent | 20171115 | |
| TheHacker | 20171112 | |
| TotalDefense | 20171115 | |
| TrendMicro | 20171115 | |
| TrendMicro-HouseCall | 20171115 | |
| Trustlook | 20171115 | |
| VBA32 | 20171115 | |
| VIPRE | 20171115 | |
| ViRobot | 20171115 | |
| Webroot | 20171115 | |
| WhiteArmor | 20171104 | |
| Yandex | 20171114 | |
| ZoneAlarm by Check Point | 20171115 | |
| Zoner | 20171115 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © 1997-2001 Borland Software Corporation
Product Borland ETM
Original name etm70.exe
Internal name etm70
File version 7.0.4.453
Description Borland External Translation Manager
Packers identified
PEiD BobSoft Mini Delphi -> BoB / BobSoft
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-04-12 14:02:18
Entry Point 0x0005B86C
Number of sections 8
PE sections
PE imports
Number of PE resources by type
RT_STRING 16
RT_BITMAP 11
RT_GROUP_CURSOR 7
RT_CURSOR 7
RT_RCDATA 3
RT_DIALOG 1
RT_VERSION 1
Number of PE resources by language
NEUTRAL 45
ENGLISH US 1
PE resources
ExifTool file metadata
UninitializedDataSize
0
LinkerVersion
2.25
ImageVersion
0.0
FileSubtype
0
FileVersionNumber
7.0.4.453
LanguageCode
English (U.S.)
FileFlagsMask
0x003f
FileDescription
Borland External Translation Manager
ImageFileCharacteristics
Executable, No line numbers, No symbols, Bytes reversed lo, 32-bit, Bytes reversed hi
CharacterSet
Windows, Latin1
InitializedDataSize
739328
EntryPoint
0x5b86c
OriginalFileName
etm70.exe
MIMEType
application/octet-stream
LegalCopyright
Copyright 1997-2001 Borland Software Corporation
FileVersion
7.0.4.453
TimeStamp
1992:04:12 15:02:18+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
etm70
ProductVersion
7.0
SubsystemVersion
4.0
OSVersion
4.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Borland Software Corporation
CodeSize
371200
ProductName
Borland ETM
ProductVersionNumber
7.0.0.0
FileTypeExtension
exe
ObjectFileType
Dynamic link library
Compressed bundles
File identification
MD5 f3147c331fbcb8cf87d45f2e573d3f4f
SHA1 0e935db298715d4c4a884dc114378844fabb7b4b
SHA256 4d5770356f40bff79141d34cb9c6704ee42017438a7949d4e455c0bd1358c7e5
ssdeep
24576:CDTPtSr5A7dgWFWqso1vVJ4rm20HK6yiNrBgsLxcnIeJKHOfU0vIP:CsVAdFN7PaD0q6yiNFgsNcnIAEOfU0wP
File size
1.1 MB ( 1111552 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable Delphi generic (35.5%) Windows screen saver (32.8%) Win32 Executable (generic) (11.2%) Win16/32 Executable Delphi generic (5.1%) OS/2 Executable (generic) (5.0%) |
Tags
bobsoft
peexe
VirusTotal metadata
First submission
2017-11-15 13:47:44 UTC ( 1 year, 5 months ago )
Last submission
2018-02-05 15:39:26 UTC ( 1 year, 2 months ago )
| File names |
f3147c331fbcb8cf87d45f2e573d3f4f.exe VirusShare_f3147c331fbcb8cf87d45f2e573d3f4f 1024-0e935db298715d4c4a884dc114378844fabb7b4b 4d.exe quote.exe quote.exe etm70 etm70.exe |
Advanced heuristic and reputation engines
F-Secure Deepguard
Suspicious:W32/Malware!Online
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!