| SHA256: | b33c066a254d0f99535a2e97518f9628166fe705adeb6abbf325afe9ecf7356f |
| File name: | Apophysis Screensaver.scr |
| Detection ratio: | 0 / 55 |
| Analysis date: | 2015-06-28 11:32:39 UTC ( 3 years, 3 months ago ) |
| Antivirus | Result | Update |
|---|---|---|
| Ad-Aware | 20150628 | |
| AegisLab | 20150626 | |
| Yandex | 20150628 | |
| AhnLab-V3 | 20150628 | |
| Alibaba | 20150626 | |
| ALYac | 20150628 | |
| Antiy-AVL | 20150628 | |
| Arcabit | 20150628 | |
| Avast | 20150628 | |
| AVG | 20150628 | |
| Avira (no cloud) | 20150628 | |
| AVware | 20150628 | |
| Baidu-International | 20150628 | |
| BitDefender | 20150628 | |
| Bkav | 20150627 | |
| ByteHero | 20150628 | |
| CAT-QuickHeal | 20150628 | |
| ClamAV | 20150628 | |
| Comodo | 20150628 | |
| Cyren | 20150628 | |
| DrWeb | 20150628 | |
| Emsisoft | 20150628 | |
| ESET-NOD32 | 20150628 | |
| F-Prot | 20150628 | |
| F-Secure | 20150628 | |
| Fortinet | 20150628 | |
| GData | 20150628 | |
| Ikarus | 20150628 | |
| Jiangmin | 20150626 | |
| K7AntiVirus | 20150628 | |
| K7GW | 20150628 | |
| Kaspersky | 20150628 | |
| Kingsoft | 20150628 | |
| Malwarebytes | 20150628 | |
| McAfee | 20150628 | |
| McAfee-GW-Edition | 20150627 | |
| Microsoft | 20150628 | |
| eScan | 20150628 | |
| NANO-Antivirus | 20150627 | |
| nProtect | 20150626 | |
| Panda | 20150628 | |
| Qihoo-360 | 20150628 | |
| Rising | 20150628 | |
| Sophos AV | 20150628 | |
| SUPERAntiSpyware | 20150628 | |
| Symantec | 20150628 | |
| Tencent | 20150628 | |
| TheHacker | 20150626 | |
| TrendMicro | 20150628 | |
| TrendMicro-HouseCall | 20150628 | |
| VBA32 | 20150627 | |
| VIPRE | 20150628 | |
| ViRobot | 20150628 | |
| Zillya | 20150628 | |
| Zoner | 20150628 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
File version 2.0.5.0
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 1992-06-19 22:22:17
Entry Point 0x0008E350
Number of sections 8
PE sections
PE imports
Number of PE resources by type
RT_STRING 18
RT_BITMAP 11
RT_GROUP_CURSOR 7
RT_CURSOR 7
RT_RCDATA 4
RT_DIALOG 1
RT_ICON 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 48
POLISH DEFAULT 3
PE resources
ExifTool file metadata
UninitializedDataSize
0
LinkerVersion
2.25
ImageVersion
0.0
FileVersionNumber
2.0.5.0
LanguageCode
Polish
FileFlagsMask
0x003f
CharacterSet
Windows, Latin2 (Eastern European)
InitializedDataSize
632320
EntryPoint
0x8e350
MIMEType
application/octet-stream
FileVersion
2.0.5.0
TimeStamp
1992:06:19 23:22:17+01:00
FileType
Win32 EXE
PEType
PE32
ProductVersion
1.0.0.0
SubsystemVersion
4.0
OSVersion
4.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CodeSize
579072
FileSubtype
0
ProductVersionNumber
2.0.5.0
FileTypeExtension
exe
ObjectFileType
Executable application
Compressed bundles
File identification
MD5 8aa92ad23e8b198b88dee7a53f6ae58d
SHA1 ead075a4c90a7f074832d05aeb58680377599bf1
SHA256 b33c066a254d0f99535a2e97518f9628166fe705adeb6abbf325afe9ecf7356f
ssdeep
24576:h3eEnKiRW5wPzlIWE/i2lLS9ACUjH4wjwYMrfuBVEy:h3eHKU4YMrWV
File size
1.2 MB ( 1212416 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 EXE PECompact compressed (generic) (48.3%) Win32 Executable Delphi generic (16.4%) Windows screen saver (15.2%) Win32 Dynamic Link Library (generic) (7.6%) Win32 Executable (generic) (5.2%) |
Tags
peexe
VirusTotal metadata
First submission
2008-04-17 18:56:07 UTC ( 10 years, 5 months ago )
Last submission
2015-06-28 11:32:39 UTC ( 3 years, 3 months ago )
| File names |
Apophysis Screensaver.scr Apophysis Screensaver.scr apophysis screensaver.scr |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!