| SHA256: | aa9aa05af8df2cc99eb936e2d17623a68abdbb60606bb097379457c4a3760116 |
| File name: | 8fb96dfab7e4c0acb1eb9f4e950ba4b9.zip.jar |
| Detection ratio: | 33 / 56 |
| Analysis date: | 2016-11-24 11:30:58 UTC ( 2 months, 2 weeks ago ) |
| Antivirus | Result | Update |
|---|---|---|
| ALYac | Trojan.Agent.BGTI | 20161124 |
| AVG | Exploit_c.ABOY | 20161124 |
| Ad-Aware | Trojan.Agent.BGTI | 20161124 |
| AegisLab | Troj.Java.Generic!c | 20161124 |
| AhnLab-V3 | JAVA/Adwind | 20161124 |
| Arcabit | Trojan.Agent.BGTI | 20161124 |
| Avast | Java:Malware-gen [Trj] | 20161124 |
| Avira (no cloud) | JAVA/Alatori.7929 | 20161124 |
| BitDefender | Trojan.Agent.BGTI | 20161124 |
| CAT-QuickHeal | Exp.JAVA.Agent.EEH | 20161124 |
| Comodo | UnclassifiedMalware | 20161124 |
| Cyren | Java/Adwind.H | 20161124 |
| DrWeb | Java.Adwind.3 | 20161124 |
| ESET-NOD32 | a variant of Java/Adwind.AC | 20161124 |
| Emsisoft | Trojan.Agent.BGTI (B) | 20161124 |
| F-Prot | Java/Adwind.H | 20161124 |
| F-Secure | Trojan.Agent.BGTI | 20161124 |
| Fortinet | Java/Adwind.DB!tr | 20161124 |
| GData | Trojan.Agent.BGTI | 20161124 |
| Ikarus | Trojan-Downloader.Java.Adwind | 20161124 |
| Jiangmin | Trojan/Java.d | 20161124 |
| Kaspersky | Trojan.Java.Adwind.b | 20161124 |
| McAfee | Adwind!0C8FA903E925 | 20161124 |
| McAfee-GW-Edition | RDN/Generic Downloader.x!bu | 20161124 |
| eScan | Trojan.Agent.BGTI | 20161124 |
| Microsoft | Trojan:Java/Adwind.E | 20161124 |
| NANO-Antivirus | Trojan.Java.Adwind.dkmdei | 20161124 |
| Sophos | Mal/JavaJar-A | 20161124 |
| Symantec | Backdoor.Alienspy | 20161124 |
| Tencent | Java.Trojan.Adwind.Eflh | 20161124 |
| TrendMicro | JAVA_ADWIND.JEJORM | 20161124 |
| TrendMicro-HouseCall | JAVA_ADWIND.JEJORM | 20161124 |
| Zillya | Trojan.Adwind.JS.97 | 20161123 |
| AVware | 20161124 | |
| Alibaba | 20161124 | |
| Antiy-AVL | 20161124 | |
| Baidu | 20161124 | |
| Bkav | 20161124 | |
| CMC | 20161124 | |
| ClamAV | 20161124 | |
| CrowdStrike Falcon (ML) | 20161024 | |
| Invincea | 20161018 | |
| K7AntiVirus | 20161124 | |
| K7GW | 20161124 | |
| Kingsoft | 20161124 | |
| Malwarebytes | 20161124 | |
| Panda | 20161123 | |
| Qihoo-360 | 20161124 | |
| Rising | 20161124 | |
| SUPERAntiSpyware | 20161124 | |
| TheHacker | 20161124 | |
| TotalDefense | 20161124 | |
| Trustlook | 20161124 | |
| VBA32 | 20161123 | |
| VIPRE | 20161124 | |
| ViRobot | 20161124 | |
| WhiteArmor | 20161018 | |
| Yandex | 20161123 | |
| Zoner | 20161124 | |
| nProtect | 20161124 |
The file being studied is a Java Archive!
Typically a JAR file contains the class files and auxiliary resources
associated with applets and applications.
Archive metadata
Total directories 0
Maximum directory depth 0
Total files 3
Maximum member date 2014-12-01 11:47:34
Minimum member date 2013-08-17 10:20:32
Manifest
Java packages
Interesting strings
Embedded files by type
ascii 1
class 1
zip 1
Embedded files
The file being studied is a compressed stream!
Details about the compressed contents follow.
Contained files
Compression metadata
Contained files
3
Uncompressed size
66913
Highest datetime
2014-12-01 11:47:34
Lowest datetime
2013-08-17 10:20:32
Contained files by extension
MF
1
ico
1
Contained files by type
Java Bytecode
1
unknown
1
ZIP
1
File identification
MD5 8fb96dfab7e4c0acb1eb9f4e950ba4b9
SHA1 3445a61556ca52cf5950583e0be4133de7a4f6a8
SHA256 aa9aa05af8df2cc99eb936e2d17623a68abdbb60606bb097379457c4a3760116
ssdeep
1536:ucKK8CGWhQITg+wyu5E2R6nm6b6CTFBd49M2z+X:uc5DyXE2Rt6u4Bd49M2o
File size
65.6 KB ( 67126 bytes )
File type JAR
Magic literal
Zip archive data, at least v2.0 to extract
| TrID |
ZIP compressed archive (100.0%) |
Tags
jar
attachment
VirusTotal metadata
First submission
2015-05-29 18:48:24 UTC ( 1 year, 8 months ago )
Last submission
2015-12-09 22:29:46 UTC ( 1 year, 2 months ago )
| File names |
dec.bin 8fb96dfab7e4c0acb1eb9f4e950ba4b9.zip.jar Estrictamente Secreto y Confidencial.pdf.jar docu.pdf.jar |
Advanced heuristic and reputation engines
ClamAV
Possibly Unwanted Application. While not necessarily malicious, the
scanned file presents certain characteristics which depending on the
user policies and environment may or may not represent a threat. For
full details see:
https://www.clamav.net/documents/potentially-unwanted-applications-pua
.
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!