| SHA256: | a5b954c8115e784d0262d6cc3e87470598f2ad00fe64ffac5f7cc46f889fe89b |
| File name: | prog1g.exe.ViR |
| Detection ratio: | 54 / 57 |
| Analysis date: | 2016-04-14 11:11:01 UTC ( 2 years, 10 months ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Ad-Aware | Trojan.Spy.Zbot.FNO | 20160414 |
| AegisLab | Troj.Spy.W32.Zbot!c | 20160414 |
| AhnLab-V3 | Spyware/Win32.Zbot | 20160414 |
| ALYac | Trojan.Spy.Zbot.FNO | 20160414 |
| Antiy-AVL | Trojan[:HEUR]/Win32.Unknown | 20160414 |
| Arcabit | Trojan.Spy.Zbot.FNO | 20160414 |
| Avast | Sf:Crypt-BR [Trj] | 20160414 |
| AVG | Agent5.AMDS | 20160414 |
| Avira (no cloud) | TR/Spy.A.6512 | 20160414 |
| AVware | Win32.Malware!Drop | 20160414 |
| Baidu | Win32.Trojan.Zbot.a | 20160414 |
| BitDefender | Trojan.Spy.Zbot.FNO | 20160414 |
| Bkav | W32.WinatoO.Trojan | 20160413 |
| CAT-QuickHeal | TrojanPWS.Zbot.Gen | 20160413 |
| ClamAV | Win.Spyware.Zbot-1275 | 20160414 |
| CMC | Trojan-Spy.Win32.Zbot!O | 20160412 |
| Comodo | TrojWare.Win32.Zbot.NEWA | 20160414 |
| Cyren | W32/Zbot.BR.gen!Eldorado | 20160414 |
| DrWeb | Trojan.PWS.Panda.2401 | 20160414 |
| Emsisoft | Trojan.Spy.Zbot.FNO (B) | 20160414 |
| ESET-NOD32 | Win32/Spy.Zbot.AAO | 20160414 |
| F-Prot | W32/Zbot.BR.gen!Eldorado | 20160414 |
| F-Secure | Trojan.Spy.Zbot.FNO | 20160414 |
| Fortinet | W32/Zbot.AAO!tr | 20160413 |
| GData | Trojan.Spy.Zbot.FNO | 20160414 |
| Ikarus | Trojan-Spy.Win32.Zbot | 20160414 |
| Jiangmin | KVBASE | 20160414 |
| K7AntiVirus | Backdoor ( 04c4ee7b1 ) | 20160414 |
| K7GW | Backdoor ( 04c4ee7b1 ) | 20160414 |
| Kaspersky | Trojan-Spy.Win32.Zbot.ntpf | 20160414 |
| Kingsoft | Win32.Troj.Undef.(kcloud) | 20160414 |
| Malwarebytes | Spyware.Citadel | 20160414 |
| McAfee | PWS-Zbot.gen.vo | 20160414 |
| McAfee-GW-Edition | BehavesLike.Win32.PWSZbot.dh | 20160414 |
| Microsoft | PWS:Win32/Zbot!CI | 20160414 |
| eScan | Trojan.Spy.Zbot.FNO | 20160414 |
| NANO-Antivirus | Trojan.Win32.Panda.bqoxse | 20160414 |
| nProtect | Trojan/W32.Agent.226304.II | 20160414 |
| Panda | Generic Malware | 20160413 |
| Qihoo-360 | Malware.Radar01.Gen | 20160414 |
| Rising | PE:Stealer.Zbot!1.648A [F] | 20160414 |
| Sophos AV | Mal/Zbot-HX | 20160414 |
| SUPERAntiSpyware | Trojan.Agent/Gen-MalPE | 20160414 |
| Symantec | Trojan.Zbot | 20160414 |
| Tencent | Win32.Backdoor.Zbot.Auto | 20160414 |
| TotalDefense | Win32/Zbot.BdERMZC | 20160414 |
| TrendMicro | TSPY_ZBOT.SMQF | 20160414 |
| TrendMicro-HouseCall | TSPY_ZBOT.SMQF | 20160414 |
| VBA32 | SScope.Trojan.FakeAV.01110 | 20160413 |
| VIPRE | Win32.Malware!Drop | 20160414 |
| ViRobot | Trojan.Win32.Agent.226304.P[h] | 20160414 |
| Yandex | TrojanSpy.Zbot!m2BM16sQScQ | 20160412 |
| Zillya | Trojan.ZbotGen.Win32.5 | 20160414 |
| Zoner | Trojan.Zbot | 20160414 |
| Alibaba | 20160414 | |
| Baidu-International | 20160414 | |
| TheHacker | 20160412 |
The file being studied is a Portable Executable file!
More specifically, it is a DOS EXE
file.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2012-11-08 19:14:23
Entry Point 0x0002B055
Number of sections 3
PE sections
Overlays
MD5 28c4663bc3da80696e2c716f530a5cc0
File type data
Offset 225280
Size 1024
Entropy 7.83
PE imports
Compressed bundles
File identification
MD5 23919b611ecbade656887587ba400900
SHA1 1645618ebd38915ee37a617011c27df2760db964
SHA256 a5b954c8115e784d0262d6cc3e87470598f2ad00fe64ffac5f7cc46f889fe89b
ssdeep
6144:w0i0DgmSlqqDLPyO/m4yODvcDjoG1oPKajg3GqVmnO76kZ:w0i0DgmBqnJcDjoGyPKaE3Dd7XZ
File size
221.0 KB ( 226304 bytes )
File type DOS EXE
Magic literal
MS-DOS executable
| TrID |
Win32 Executable (generic) (38.8%) DOS Executable Borland Pascal 7.0x (17.5%) Generic Win/DOS Executable (17.2%) DOS Executable Generic (17.2%) Music Craft Score (8.6%) |
Tags
mz
overlay
VirusTotal metadata
First submission
2016-03-30 12:48:01 UTC ( 2 years, 11 months ago )
Last submission
2018-10-09 16:34:12 UTC ( 4 months, 2 weeks ago )
| File names |
23919b611ecbade656887587ba400900.exe 1645618ebd38915ee37a617011c27df2760db964.exe prog1g.exe m4kfGFr.tmp prog1g.exe prog1g.exe.ViR prog1g.exe.ViR |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!