× Cookies are disabled! This site requires cookies to be enabled to work properly
VirusTotal
SHA256: b90d785b8b1b263c52345fb1b84cd62966c52c895643a7f0683d0f1b71ea1861
File name: SBypA.exe
Detection ratio: 41 / 67
Analysis date: 2018-10-30 08:35:18 UTC ( 3 months, 3 weeks ago ) View latest
Antivirus Result Update
Ad-Aware Trojan.Generic.23154319 20181030
AhnLab-V3 Trojan/Win32.Emotet.R234758 20181030
ALYac Trojan.Generic.23154319 20181030
Arcabit Trojan.Generic.D1614E8F 20181030
Avast Win32:BankerX-gen [Trj] 20181030
AVG Win32:BankerX-gen [Trj] 20181030
BitDefender Trojan.Generic.23154319 20181030
CrowdStrike Falcon (ML) malicious_confidence_100% (W) 20181022
Cybereason malicious.f45374 20180225
Cylance Unsafe 20181030
Cyren W32/Emotet.DR.gen!Eldorado 20181030
Emsisoft Trojan.Generic.23154319 (B) 20181030
Endgame malicious (high confidence) 20180730
ESET-NOD32 a variant of Win32/Kryptik.GLZB 20181030
F-Prot W32/Emotet.DR.gen!Eldorado 20181030
F-Secure Trojan.Generic.23154319 20181030
Fortinet W32/GenKryptik.COZO!tr 20181030
GData Trojan.Generic.23154319 20181030
Ikarus Trojan.Win32.Crypt 20181029
Sophos ML heuristic 20180717
K7AntiVirus Trojan ( 0053fa711 ) 20181030
K7GW Trojan ( 0053fa711 ) 20181030
Kaspersky Trojan-Banker.Win32.Emotet.bkhh 20181030
Malwarebytes Trojan.Emotet 20181030
McAfee RDN/Generic.grp 20181030
McAfee-GW-Edition BehavesLike.Win32.Emotet.ch 20181030
Microsoft Trojan:Win32/Emotet.AC!bit 20181030
eScan Trojan.Generic.23154319 20181030
Palo Alto Networks (Known Signatures) generic.ml 20181030
Panda Trj/GdSda.A 20181029
Qihoo-360 HEUR/QVM20.1.C56B.Malware.Gen 20181030
Rising Trojan.Fuerboos!8.EFC8 (TFE:2:gMTZoaQ0OSQ) 20181030
SentinelOne (Static ML) static engine - malicious 20181011
Sophos AV Mal/EncPk-ANY 20181030
Symantec Trojan.Emotet 20181029
TACHYON Banker/W32.Emotet.155648.AR 20181030
Tencent Win32.Trojan-banker.Emotet.Suni 20181030
TrendMicro TROJ_GEN.R002C0CJR18 20181030
TrendMicro-HouseCall TROJ_GEN.R002C0CJR18 20181030
Webroot W32.Trojan.Emotet 20181030
ZoneAlarm by Check Point Trojan-Banker.Win32.Emotet.bkhh 20181030
AegisLab 20181030
Alibaba 20180921
Antiy-AVL 20181029
Avast-Mobile 20181030
Avira (no cloud) 20181030
Babable 20180918
Baidu 20181030
Bkav 20181029
CAT-QuickHeal 20181028
ClamAV 20181030
CMC 20181030
DrWeb 20181030
eGambit 20181030
Jiangmin 20181030
Kingsoft 20181030
MAX 20181030
NANO-Antivirus 20181030
SUPERAntiSpyware 20181029
Symantec Mobile Insight 20181026
TheHacker 20181025
TotalDefense 20181030
Trustlook 20181030
VBA32 20181029
ViRobot 20181030
Yandex 20181026
Zillya 20181029
Zoner 20181030
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright (c) 2001

Product Sola Plug-in
Original name NPJava13.dll
Internal name Sola Plug-in
File version 1, 4, 2, 50
Description Sola Plug-in 1.4.2_05 for Netscape Navigator (DLL Helper)
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2018-10-25 12:15:28
Entry Point 0x000014AC
Number of sections 9
PE sections
PE imports
[+] ADVAPI32.dll
PrivilegeCheck
CryptEncrypt
AddAccessDeniedObjectAce
RegisterServiceCtrlHandlerA
RegEnableReflectionKey
[+] CRYPT32.dll
CertFreeCTLContext
[+] ESENT.dll
JetIndexRecordCount
[+] GDI32.dll
GetTextCharsetInfo
GetKerningPairsW
SetLayout
GetBkMode
GetPath
SetTextJustification
SetWindowOrgEx
GetEnhMetaFileW
GetEnhMetaFileBits
GetRasterizerCaps
[+] KERNEL32.dll
CreateMailslotW
QueryProcessCycleTime
GetFileTime
SwitchToThread
LockFileEx
GetFileSizeEx
ZombifyActCtx
GetProcessShutdownParameters
GetCurrentProcessId
UnmapViewOfFile
OpenThread
GetCommandLineW
LocalHandle
GenerateConsoleCtrlEvent
GetCommandLineA
HeapValidate
GetUserDefaultLCID
AddRefActCtx
TzSpecificLocalTimeToSystemTime
GetNativeSystemInfo
GetLocaleInfoW
[+] MPRAPI.dll
MprAdminMIBEntryDelete
[+] NTDSAPI.dll
DsReplicaGetInfo2W
DsQuoteRdnValueW
[+] OLEAUT32.dll
VarUI4FromUI8
[+] POWRPROF.dll
GetPwrDiskSpindownRange
[+] RASAPI32.dll
RasGetAutodialAddressA
[+] RPCRT4.dll
NdrClearOutParameters
RpcBindingInqAuthClientW
RpcBindingReset
[+] SETUPAPI.dll
SetupFindNextMatchLineW
SetupGetLineByIndexW
[+] SHELL32.dll
Shell_NotifyIconW
SHOpenFolderAndSelectItems
Shell_NotifyIconA
DuplicateIcon
[+] SHLWAPI.dll
PathIsURLW
PathFindExtensionA
UrlUnescapeW
ColorHLSToRGB
[+] USER32.dll
GetClipboardOwner
GetDlgCtrlID
GetDoubleClickTime
AppendMenuA
UnregisterHotKey
GetMenuStringA
AdjustWindowRect
MonitorFromPoint
ReleaseCapture
FindWindowW
SetWindowLongW
GetClipboardData
AdjustWindowRectEx
GetMessageTime
GetProcessWindowStation
GetAncestor
SetActiveWindow
GetProcessDefaultLayout
[+] VERSION.dll
GetFileVersionInfoW
[+] WINMM.dll
midiOutGetVolume
CloseDriver
[+] WS2_32.dll
setsockopt
[+] ole32.dll
OleLoad
CoFreeUnusedLibraries
CoImpersonateClient
[+] urlmon.dll
FindMimeFromData
Number of PE resources by type
RT_DIALOG 20
RT_STRING 10
RT_VERSION 1
Number of PE resources by language
ENGLISH US 4
ITALIAN NEUTRAL 3
SWEDISH NEUTRAL 3
CHINESE TRADITIONAL 3
SPANISH NEUTRAL 3
GERMAN NEUTRAL 3
CHINESE SIMPLIFIED 3
JAPANESE DEFAULT 3
FRENCH NEUTRAL 3
KOREAN 3
PE resources
Debug information
ExifTool file metadata
UninitializedDataSize
0

InitializedDataSize
139264

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
1.4.2.50

LanguageCode
English (U.S.)

FileFlagsMask
0x003f

FileDescription
Sola Plug-in 1.4.2_05 for Netscape Navigator (DLL Helper)

ImageFileCharacteristics
Executable, 32-bit

CharacterSet
Windows, Latin1

LinkerVersion
11.0

EntryPoint
0x14ac

OriginalFileName
NPJava13.dll

MIMEType
application/x-java-applet;version=1.3.1|application/x-java-bean;version=1.3.1|application/x-java-applet;version=1.4|application/x-java-bean;version=1.4|application/x-java-applet;version=1.4.1|application/x-java-bean;version=1.4.1

LegalCopyright
Copyright (c) 2001

FileExtents
|||||

FileOpenName
Sola Applet|JavaBeans|Sola Applet|SolaBeans|Sola Applet|SolaBeans

FileVersion
1, 4, 2, 50

TimeStamp
2018:10:25 14:15:28+02:00

FileType
Win32 EXE

PEType
PE32

InternalName
Sola Plug-in

ProductVersion
1, 4, 2, 50

SubsystemVersion
5.1

OSVersion
4.0

FileOS
Win32

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
SolaSoft / Sun Microsystems, Inc.

CodeSize
8192

ProductName
Sola Plug-in

ProductVersionNumber
1.4.2.50

FileTypeExtension
exe

ObjectFileType
Dynamic link library

File identification
MD5 c21a1e1f45374a7b8bb57185efb7df6a
SHA1 57bb78e1f6929eb64faf8b0c68fe68264cbf1386
SHA256 b90d785b8b1b263c52345fb1b84cd62966c52c895643a7f0683d0f1b71ea1861
ssdeep
3072:btymtDeInmqLd0TiUkot8VPMWTHxvX2eDDD5lg2:btykqImwdrot8NVEeDDDX

authentihash d20a2ddf839a5de41727ec8070d48cecc06374b80e71eafe1a40d38eb6121285
imphash fa1a9e044f2a34390ab70f46b0767fae
File size 152.0 KB ( 155648 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID Win32 Dynamic Link Library (generic) (38.4%)
Win32 Executable (generic) (26.3%)
OS/2 Executable (generic) (11.8%)
Generic Win/DOS Executable (11.6%)
DOS Executable Generic (11.6%)
Tags
peexe

VirusTotal metadata
First submission 2018-10-25 12:22:26 UTC ( 3 months, 3 weeks ago )
Last submission 2018-10-25 12:22:26 UTC ( 3 months, 3 weeks ago )
File names Sola Plug-in
NPJava13.dll
SBypA.exe
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!
More comments

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

Sign in Join the community
No votes. No one has voted on this item yet, be the first one to do so!
More votes
Blog | Twitter | Contact us | ToS | Privacy policy