× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: d4ffa4559a1e22167933772d82cf714cd4bb7a0e79511c2424e18bdb619d63a4
File name: putty.exe
Detection ratio: 0 / 57
Analysis date: 2015-03-01 02:37:01 UTC ( 20 minutes ago )
Probably harmless! There are strong indicators suggesting that this file is safe to use.
Antivirus Result Update
ALYac 20150301
AVG 20150301
AVware 20150228
Ad-Aware 20150301
AegisLab 20150301
Agnitum 20150228
AhnLab-V3 20150228
Alibaba 20150301
Antiy-AVL 20150228
Avast 20150301
Avira 20150228
Baidu-International 20150228
BitDefender 20150301
Bkav 20150228
ByteHero 20150301
CAT-QuickHeal 20150228
CMC 20150301
ClamAV 20150228
Comodo 20150228
Cyren 20150301
DrWeb 20150228
ESET-NOD32 20150228
Emsisoft 20150301
F-Prot 20150301
F-Secure 20150228
Fortinet 20150301
GData 20150301
Ikarus 20150228
Jiangmin 20150228
K7AntiVirus 20150228
K7GW 20150228
Kaspersky 20150301
Kingsoft 20150301
Malwarebytes 20150301
McAfee 20150301
McAfee-GW-Edition 20150301
MicroWorld-eScan 20150301
Microsoft 20150301
NANO-Antivirus 20150301
Norman 20150228
Panda 20150228
Qihoo-360 20150301
Rising 20150228
SUPERAntiSpyware 20150228
Sophos 20150301
Symantec 20150301
Tencent 20150301
TheHacker 20150227
TotalDefense 20150301
TrendMicro 20150301
TrendMicro-HouseCall 20150301
VBA32 20150227
VIPRE 20150301
ViRobot 20150228
Zillya 20150228
Zoner 20150227
nProtect 20150227
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
Developer metadata
Copyright
Copyright © 1997-2011 Simon Tatham.

Publisher Simon Tatham
Product PuTTY suite
Original name PuTTY
Internal name PuTTY
File version Release 0.62
Description SSH, Telnet and Rlogin client
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2011-12-10 12:35:49
Link date 1:35 PM 12/10/2011
Entry Point 0x0004C4DF
Number of sections 4
PE sections
PE imports
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueExA
CopySid
RegQueryValueExA
GetUserNameA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
GetLengthSid
RegCreateKeyA
Ord(15)
Ord(14)
Ord(17)
Ord(13)
SetMapMode
CreatePen
GetBkMode
GetCharWidth32W
TextOutA
CreateFontIndirectA
GetTextMetricsA
UpdateColors
GetPixel
Rectangle
GetDeviceCaps
ExcludeClipRect
TranslateCharsetInfo
LineTo
GetTextExtentExPointA
DeleteDC
SetBkMode
GetCharacterPlacementW
GetCharWidthW
SetPixel
IntersectClipRect
GetCharWidthA
RealizePalette
SetTextColor
GetObjectA
MoveToEx
ExtTextOutW
SetPaletteEntries
CreateBitmap
CreateFontA
CreatePalette
GetStockObject
SelectPalette
ExtTextOutA
UnrealizeObject
SetTextAlign
CreateCompatibleDC
SelectObject
GetTextExtentPoint32A
GetCharABCWidthsFloatA
CreateSolidBrush
Polyline
SetBkColor
GetCharWidth32A
DeleteObject
CreateCompatibleBitmap
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontA
GetStdHandle
GetOverlappedResult
WaitForSingleObject
HeapDestroy
GetLocalTime
FreeEnvironmentStringsA
CreatePipe
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
FreeEnvironmentStringsW
SetStdHandle
IsDBCSLeadByteEx
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
GetThreadTimes
HeapReAlloc
GetStringTypeW
FreeLibrary
LocalFree
GetEnvironmentVariableA
FindClose
GetSystemTime
Beep
ExitProcess
GetVersionExA
GetModuleFileNameA
UnhandledExceptionFilter
MultiByteToWideChar
GetModuleHandleA
CreateThread
MulDiv
GetSystemDirectoryA
SetHandleInformation
SetEnvironmentVariableA
GlobalMemoryStatus
GetCommState
SetEndOfFile
GetCurrentThreadId
SetCurrentDirectoryA
HeapFree
SetHandleCount
SetEvent
QueryPerformanceCounter
GetTickCount
VirtualProtect
FlushFileBuffers
LoadLibraryA
RtlUnwind
GetStartupInfoA
GetDateFormatA
OpenProcess
DeleteFileA
GetWindowsDirectoryA
GetCPInfo
GlobalLock
CompareStringW
FindFirstFileA
CompareStringA
CreateFileMappingA
FindNextFileA
TerminateProcess
GetProcAddress
SetCommTimeouts
GetTimeZoneInformation
SetCommState
CreateEventA
GetFileType
CreateFileA
HeapAlloc
GetLastError
LCMapStringW
HeapCreate
GetSystemInfo
GlobalFree
LCMapStringA
GetProcessTimes
GlobalAlloc
GetEnvironmentStringsW
GlobalUnlock
VirtualQuery
GetEnvironmentStrings
GetCurrentProcessId
GetCurrentDirectoryA
ClearCommBreak
HeapSize
GetCommandLineA
GetCurrentThread
MapViewOfFile
SetFilePointer
SetCommBreak
ReadFile
CloseHandle
lstrcpynA
GetACP
GetSystemTimeAdjustment
CreateProcessA
UnmapViewOfFile
VirtualFree
VirtualAlloc
GetOEMCP
GetTimeFormatA
ShellExecuteA
SetDlgItemTextA
GetForegroundWindow
PostQuitMessage
SetWindowPos
IsWindow
DispatchMessageA
EndPaint
GetMessageTime
SetActiveWindow
GetDC
GetCursorPos
ReleaseDC
CreateWindowExA
SendMessageA
GetClientRect
GetWindowTextLengthA
TrackPopupMenu
ShowCursor
MsgWaitForMultipleObjects
GetWindowTextA
DestroyWindow
GetMessageA
GetParent
UpdateWindow
CheckRadioButton
CreateCaret
ShowWindow
SetClassLongA
EnableWindow
SetWindowPlacement
GetDlgItemTextA
PeekMessageA
TranslateMessage
DestroyCaret
GetQueueStatus
SetClipboardData
IsZoomed
GetWindowPlacement
IsIconic
RegisterClassA
GetWindowLongA
SetTimer
GetKeyboardLayout
FlashWindow
IsDialogMessageA
SetFocus
DrawEdge
SetCapture
BeginPaint
SetCaretPos
KillTimer
GetClipboardOwner
RegisterWindowMessageA
DefWindowProcA
ToAsciiEx
GetClipboardData
SendDlgItemMessageA
GetSystemMetrics
EnableMenuItem
GetWindowRect
PostMessageA
ReleaseCapture
SetWindowLongA
SetKeyboardState
CheckDlgButton
CreatePopupMenu
CheckMenuItem
CreateMenu
GetDlgItem
CreateDialogParamA
ScreenToClient
InsertMenuA
LoadCursorA
LoadIconA
GetKeyboardState
IsDlgButtonChecked
GetDesktopWindow
GetSystemMenu
SetForegroundWindow
OpenClipboard
EmptyClipboard
GetCaretBlinkTime
MapDialogRect
EndDialog
HideCaret
GetCapture
FindWindowA
MessageBeep
ShowCaret
AppendMenuA
RegisterClipboardFormatA
MessageBoxIndirectA
MoveWindow
MessageBoxA
DialogBoxParamA
GetSysColor
SetScrollInfo
SystemParametersInfoA
GetDoubleClickTime
WinHelpA
DeleteMenu
InvalidateRect
SetWindowTextA
DefDlgProcA
CloseClipboard
SetCursor
PlaySoundA
EnumPrintersA
EndPagePrinter
StartPagePrinter
StartDocPrinterA
OpenPrinterA
WritePrinter
EndDocPrinter
ClosePrinter
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
ChooseFontA
CoCreateInstance
CoUninitialize
CoInitialize
Number of PE resources by type
RT_ICON 12
RT_DIALOG 4
RT_GROUP_ICON 2
RT_MANIFEST 1
RT_VERSION 1
Number of PE resources by language
ENGLISH US 20
ExifTool file metadata
SubsystemVersion
4.0

LinkerVersion
7.1

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
0.62.0.0

UninitializedDataSize
0

LanguageCode
English (British)

FileFlagsMask
0x000b

CharacterSet
Unicode

InitializedDataSize
163840

FileOS
Win32

MIMEType
application/octet-stream

LegalCopyright
Copyright 1997-2011 Simon Tatham.

FileVersion
Release 0.62

TimeStamp
2011:12:10 13:35:49+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
PuTTY

ProductVersion
Release 0.62

FileDescription
SSH, Telnet and Rlogin client

OSVersion
4.0

OriginalFilename
PuTTY

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
Simon Tatham

CodeSize
344064

ProductName
PuTTY suite

ProductVersionNumber
0.62.0.0

EntryPoint
0x4c4df

ObjectFileType
Executable application

CarbonBlack CarbonBlack acts as a surveillance camera for computers
While monitoring an end-user machine in-the-wild, CarbonBlack noticed the following files in execution wrote this sample to disk.
Execution parents
PE resource-wise parents
Compressed bundles
PCAP parents
File identification
MD5 a3ccfd0aa0b17fd23aa9fd0d84b86c05
SHA1 89c19274ad51b6fbd12fb59908316088c1135307
SHA256 d4ffa4559a1e22167933772d82cf714cd4bb7a0e79511c2424e18bdb619d63a4
ssdeep
12288:J743NHanev1s4kd83ubHX2+v1g8YyCCTlaG9PnV6I:RgN6nY13ebHX2+tlNl7V6

authentihash e0517ea6c2896caa97d6cbf4e8caea00409f03703e888e83cfbc460f7682f337
imphash 74638b0911b0c9268aae1edee5a60a9f
File size 472.0 KB ( 483328 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID InstallShield setup (42.0%)
Win32 Executable MS Visual C++ (generic) (30.4%)
Windows Screen Saver (12.7%)
Win32 Dynamic Link Library (generic) (6.4%)
Win32 Executable (generic) (4.3%)
Tags
peexe

VirusTotal metadata
First submission 2011-12-10 15:52:37 UTC ( 3 years, 2 months ago )
Last submission 2015-03-01 02:37:01 UTC ( 20 minutes ago )
File names dss_5513138143498390093.3mtjfd
tmpf641.tmp
prf4d1.tmp
altb291.tmp
putty (2).exe
prf33e.tmp
altb7bf.tmp
putty.exe.s1xj3uq.partial
alta102.tmp
altb54f.tmp
prf442.tmp
PUTTY.EXE
022020151559078750_putty.exe
rhaze5fnkg3pxujpwwmqqmlardarguyh.exe
vs060l0k.5im
2015_02_03_16_24_52.000349
112020140134536623_putty.exe
Trojan.Generic.47135.exe
alte99c.tmp
putty-{cf547313-8adf-4ef2-a6a5-2e780caa6aa9}-v5422420.exe
alt4145.tmp
putty.txt
121420141714358675_putty.exe
vs6khg00.g0n
vs3l063a.q3l
Advanced heuristic and reputation engines
ClamAV PUA
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: http://www.clamav.net/doc/pua.html .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!