| SHA256: | 5fc137d355150a01d3912da8fba03fe615b317bec0cd378d50168a2ef4990acd |
| File name: | Mendes DLL Injector v1.0.exe |
| Detection ratio: | 0 / 42 |
| Analysis date: | 2012-02-01 21:26:08 UTC ( 7 years ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| AhnLab-V3 | 20120201 | |
| AntiVir | 20120201 | |
| Antiy-AVL | 20120131 | |
| Avast | 20120201 | |
| AVG | 20120201 | |
| BitDefender | 20120201 | |
| ByteHero | 20120126 | |
| CAT-QuickHeal | 20120131 | |
| ClamAV | 20120201 | |
| Commtouch | 20120201 | |
| Comodo | 20120201 | |
| DrWeb | 20120201 | |
| Emsisoft | 20120201 | |
| eSafe | 20120130 | |
| eTrust-Vet | 20120201 | |
| F-Prot | 20120201 | |
| F-Secure | 20120201 | |
| Fortinet | 20120201 | |
| GData | 20120201 | |
| Ikarus | 20120201 | |
| Jiangmin | 20120201 | |
| K7AntiVirus | 20120201 | |
| Kaspersky | 20120201 | |
| McAfee | 20120201 | |
| McAfee-GW-Edition | 20120201 | |
| Microsoft | 20120201 | |
| NOD32 | 20120201 | |
| Norman | 20120201 | |
| nProtect | 20120201 | |
| Panda | 20120201 | |
| PCTools | 20120201 | |
| Rising | 20120118 | |
| Sophos AV | 20120201 | |
| SUPERAntiSpyware | 20120201 | |
| Symantec | 20120201 | |
| TheHacker | 20120131 | |
| TrendMicro | 20120201 | |
| TrendMicro-HouseCall | 20120201 | |
| VBA32 | 20120131 | |
| VIPRE | 20120201 | |
| ViRobot | 20120201 | |
| VirusBuster | 20120201 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
www.mendesdowns.blogspot.com
Product www.mendesdowns.blogspot.com
Original name www.mendesdowns.blogspot.com
Internal name www.mendesdowns.blogspot.com
File version 1.0.0.0
Description www.mendesdowns.blogspot.com
Comments www.mendesdowns.blogspot.com
Packers identified
PEiD BobSoft Mini Delphi -> BoB / BobSoft
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-06-19 22:22:17
Entry Point 0x000793E4
Number of sections 8
PE sections
PE imports
Number of PE resources by type
RT_BITMAP 66
RT_STRING 18
RT_GROUP_CURSOR 7
RT_CURSOR 7
RT_RCDATA 4
RT_DIALOG 1
RT_ICON 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 97
RUSSIAN 6
PORTUGUESE BRAZILIAN 3
PE resources
ExifTool file metadata
CodeSize
493056
SubsystemVersion
4.0
Comments
www.mendesdowns.blogspot.com
InitializedDataSize
242176
ImageVersion
0.0
ProductName
www.mendesdowns.blogspot.com
FileVersionNumber
1.0.0.0
UninitializedDataSize
0
LanguageCode
Portuguese (Brazilian)
FileFlagsMask
0x003f
CharacterSet
Windows, Latin1
LinkerVersion
2.25
FileTypeExtension
exe
OriginalFileName
www.mendesdowns.blogspot.com
MIMEType
application/octet-stream
Subsystem
Windows GUI
FileVersion
1.0.0.0
TimeStamp
1992:06:19 23:22:17+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
www.mendesdowns.blogspot.com
ProductVersion
1.0.0.0
FileDescription
www.mendesdowns.blogspot.com
OSVersion
4.0
FileOS
Win32
LegalCopyright
www.mendesdowns.blogspot.com
MachineType
Intel 386 or later, and compatibles
CompanyName
www.mendesdowns.blogspot.com
LegalTrademarks
www.mendesdowns.blogspot.com
FileSubtype
0
ProductVersionNumber
1.0.0.0
EntryPoint
0x793e4
ObjectFileType
Executable application
Execution parents
Compressed bundles
File identification
MD5 08c8405dc8120fe199cd015735c62c7a
SHA1 7570cbeecbd96f9ad13545cec7606d178a64a81f
SHA256 5fc137d355150a01d3912da8fba03fe615b317bec0cd378d50168a2ef4990acd
ssdeep
12288:wvhknX/Wr6tMWzx4JcfiNdD0xQNDAI0Y1e2t8SdaP/InETiC7PVVVXpjSlgw0:eynXw6tzkAxgD+Sd4/aETl/VXp/w0
File size
719.0 KB ( 736256 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable Borland Delphi 7 (45.9%) Win32 Executable Borland Delphi 5 (31.2%) Win32 Executable Borland Delphi 6 (18.1%) InstallShield setup (2.9%) Win32 Executable Delphi generic (0.9%) |
Tags
bobsoft
peexe
VirusTotal metadata
First submission
2012-02-01 20:36:17 UTC ( 7 years ago )
Last submission
2016-08-03 01:30:53 UTC ( 2 years, 6 months ago )
| File names |
Mendes DLL Injector v1.0.exe 1059-7570cbeecbd96f9ad13545cec7606d178a64a81f mendes dll injector v1.0.exe Mendes DLL Injector v1.0_original.exe 08C8405DC8120FE199CD015735C62C7A Mendes Injector V1.0.exe Mendes DLL Injector v1.0 (1) (1).exe INJECTOR v1.0.exe filename mendes_dll_injector_v1.0.exe So_acho_injector_com_virus.exe www.mendesdowns.blogspot.com Mendes DLL Injector v1.0 - Cópia - Cópia.exe Mendes DLL Injector..exe MU Hacker Mu AwaY 1.6.exe mendes dll injector v1.0 (1).exe Mendes_DLL_Injector_v1.0.exe smona_5fc137d355150a01d3912da8fba03fe615b317bec0cd378d50168a2ef4990acd.bin mendes dll injector v1.2.exe Injetor.exe Mendes_Injector.exe file-3493850_exe System Ninja.exe |
Advanced heuristic and reputation engines
TrendMicro-HouseCall
TrendMicro's heuristic engine has flagged this file as: TROJ_GEN.R047C0OHS15.
F-Secure Deepguard
Suspicious:W32/Malware!Online
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!