× Cookies are disabled! This site requires cookies to be enabled to work properly
SHA256: d4ffa4559a1e22167933772d82cf714cd4bb7a0e79511c2424e18bdb619d63a4
File name: putty.exe
Detection ratio: 0 / 56
Analysis date: 2015-04-26 05:28:45 UTC ( 48 minutes ago )
Probably harmless! There are strong indicators suggesting that this file is safe to use.
Antivirus Result Update
ALYac 20150426
AVG 20150426
AVware 20150426
Ad-Aware 20150426
AegisLab 20150426
Agnitum 20150425
AhnLab-V3 20150425
Alibaba 20150426
Antiy-AVL 20150425
Avast 20150426
Avira 20150425
Baidu-International 20150421
BitDefender 20150426
Bkav 20150425
ByteHero 20150426
CAT-QuickHeal 20150425
CMC 20150423
ClamAV 20150426
Comodo 20150426
Cyren 20150426
DrWeb 20150426
ESET-NOD32 20150425
Emsisoft 20150426
F-Prot 20150426
F-Secure 20150426
Fortinet 20150423
GData 20150426
Ikarus 20150426
Jiangmin 20150424
K7AntiVirus 20150425
K7GW 20150425
Kaspersky 20150426
Kingsoft 20150426
Malwarebytes 20150426
McAfee 20150426
McAfee-GW-Edition 20150425
MicroWorld-eScan 20150426
Microsoft 20150426
NANO-Antivirus 20150426
Norman 20150426
Panda 20150424
Qihoo-360 20150426
Rising 20150425
SUPERAntiSpyware 20150425
Sophos 20150426
Symantec 20150426
Tencent 20150426
TheHacker 20150426
TotalDefense 20150425
TrendMicro 20150426
TrendMicro-HouseCall 20150426
VBA32 20150425
VIPRE 20150426
ViRobot 20150425
Zillya 20150424
Zoner 20150424
nProtect 20150424
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
Developer metadata
Copyright
Copyright © 1997-2011 Simon Tatham.

Publisher Simon Tatham
Product PuTTY suite
Original name PuTTY
Internal name PuTTY
File version Release 0.62
Description SSH, Telnet and Rlogin client
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2011-12-10 12:35:49
Link date 1:35 PM 12/10/2011
Entry Point 0x0004C4DF
Number of sections 4
PE sections
PE imports
RegDeleteKeyA
RegOpenKeyA
RegCloseKey
RegSetValueExA
CopySid
RegQueryValueExA
GetUserNameA
RegEnumKeyA
RegDeleteValueA
RegCreateKeyExA
GetLengthSid
RegCreateKeyA
Ord(15)
Ord(14)
Ord(17)
Ord(13)
SetMapMode
CreatePen
GetBkMode
GetCharWidth32W
TextOutA
CreateFontIndirectA
GetTextMetricsA
UpdateColors
GetPixel
Rectangle
GetDeviceCaps
ExcludeClipRect
TranslateCharsetInfo
LineTo
GetTextExtentExPointA
DeleteDC
SetBkMode
GetCharacterPlacementW
GetCharWidthW
SetPixel
IntersectClipRect
GetCharWidthA
RealizePalette
SetTextColor
GetObjectA
MoveToEx
ExtTextOutW
SetPaletteEntries
CreateBitmap
CreateFontA
CreatePalette
GetStockObject
SelectPalette
ExtTextOutA
UnrealizeObject
SetTextAlign
CreateCompatibleDC
SelectObject
GetTextExtentPoint32A
GetCharABCWidthsFloatA
CreateSolidBrush
Polyline
SetBkColor
GetCharWidth32A
DeleteObject
CreateCompatibleBitmap
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ImmSetCompositionWindow
ImmSetCompositionFontA
GetStdHandle
GetOverlappedResult
WaitForSingleObject
HeapDestroy
GetLocalTime
FreeEnvironmentStringsA
CreatePipe
GetCurrentProcess
GetLocaleInfoA
LocalAlloc
FreeEnvironmentStringsW
SetStdHandle
IsDBCSLeadByteEx
WideCharToMultiByte
GetStringTypeA
InterlockedExchange
WriteFile
GetSystemTimeAsFileTime
GetThreadTimes
HeapReAlloc
GetStringTypeW
FreeLibrary
LocalFree
GetEnvironmentVariableA
FindClose
GetSystemTime
Beep
ExitProcess
GetVersionExA
GetModuleFileNameA
UnhandledExceptionFilter
MultiByteToWideChar
GetModuleHandleA
CreateThread
MulDiv
GetSystemDirectoryA
SetHandleInformation
SetEnvironmentVariableA
GlobalMemoryStatus
GetCommState
SetEndOfFile
GetCurrentThreadId
SetCurrentDirectoryA
HeapFree
SetHandleCount
SetEvent
QueryPerformanceCounter
GetTickCount
VirtualProtect
FlushFileBuffers
LoadLibraryA
RtlUnwind
GetStartupInfoA
GetDateFormatA
OpenProcess
DeleteFileA
GetWindowsDirectoryA
GetCPInfo
GlobalLock
CompareStringW
FindFirstFileA
CompareStringA
CreateFileMappingA
FindNextFileA
TerminateProcess
GetProcAddress
SetCommTimeouts
GetTimeZoneInformation
SetCommState
CreateEventA
GetFileType
CreateFileA
HeapAlloc
GetLastError
LCMapStringW
HeapCreate
GetSystemInfo
GlobalFree
LCMapStringA
GetProcessTimes
GlobalAlloc
GetEnvironmentStringsW
GlobalUnlock
VirtualQuery
GetEnvironmentStrings
GetCurrentProcessId
GetCurrentDirectoryA
ClearCommBreak
HeapSize
GetCommandLineA
GetCurrentThread
MapViewOfFile
SetFilePointer
SetCommBreak
ReadFile
CloseHandle
lstrcpynA
GetACP
GetSystemTimeAdjustment
CreateProcessA
UnmapViewOfFile
VirtualFree
VirtualAlloc
GetOEMCP
GetTimeFormatA
ShellExecuteA
SetDlgItemTextA
GetForegroundWindow
PostQuitMessage
SetWindowPos
IsWindow
DispatchMessageA
EndPaint
GetMessageTime
SetActiveWindow
GetDC
GetCursorPos
ReleaseDC
CreateWindowExA
SendMessageA
GetClientRect
GetWindowTextLengthA
TrackPopupMenu
ShowCursor
MsgWaitForMultipleObjects
GetWindowTextA
DestroyWindow
GetMessageA
GetParent
UpdateWindow
CheckRadioButton
CreateCaret
ShowWindow
SetClassLongA
EnableWindow
SetWindowPlacement
GetDlgItemTextA
PeekMessageA
TranslateMessage
DestroyCaret
GetQueueStatus
SetClipboardData
IsZoomed
GetWindowPlacement
IsIconic
RegisterClassA
GetWindowLongA
SetTimer
GetKeyboardLayout
FlashWindow
IsDialogMessageA
SetFocus
DrawEdge
SetCapture
BeginPaint
SetCaretPos
KillTimer
GetClipboardOwner
RegisterWindowMessageA
DefWindowProcA
ToAsciiEx
GetClipboardData
SendDlgItemMessageA
GetSystemMetrics
EnableMenuItem
GetWindowRect
PostMessageA
ReleaseCapture
SetWindowLongA
SetKeyboardState
CheckDlgButton
CreatePopupMenu
CheckMenuItem
CreateMenu
GetDlgItem
CreateDialogParamA
ScreenToClient
InsertMenuA
LoadCursorA
LoadIconA
GetKeyboardState
IsDlgButtonChecked
GetDesktopWindow
GetSystemMenu
SetForegroundWindow
OpenClipboard
EmptyClipboard
GetCaretBlinkTime
MapDialogRect
EndDialog
HideCaret
GetCapture
FindWindowA
MessageBeep
ShowCaret
AppendMenuA
RegisterClipboardFormatA
MessageBoxIndirectA
MoveWindow
MessageBoxA
DialogBoxParamA
GetSysColor
SetScrollInfo
SystemParametersInfoA
GetDoubleClickTime
WinHelpA
DeleteMenu
InvalidateRect
SetWindowTextA
DefDlgProcA
CloseClipboard
SetCursor
PlaySoundA
EnumPrintersA
EndPagePrinter
StartPagePrinter
StartDocPrinterA
OpenPrinterA
WritePrinter
EndDocPrinter
ClosePrinter
GetOpenFileNameA
ChooseColorA
GetSaveFileNameA
ChooseFontA
CoCreateInstance
CoUninitialize
CoInitialize
Number of PE resources by type
RT_ICON 12
RT_DIALOG 4
RT_GROUP_ICON 2
RT_MANIFEST 1
RT_VERSION 1
Number of PE resources by language
ENGLISH US 20
ExifTool file metadata
SubsystemVersion
4.0

LinkerVersion
7.1

ImageVersion
0.0

FileSubtype
0

FileVersionNumber
0.62.0.0

UninitializedDataSize
0

LanguageCode
English (British)

FileFlagsMask
0x000b

CharacterSet
Unicode

InitializedDataSize
163840

FileOS
Win32

EntryPoint
0x4c4df

MIMEType
application/octet-stream

LegalCopyright
Copyright 1997-2011 Simon Tatham.

FileVersion
Release 0.62

TimeStamp
2011:12:10 13:35:49+01:00

FileType
Win32 EXE

PEType
PE32

InternalName
PuTTY

ProductVersion
Release 0.62

FileDescription
SSH, Telnet and Rlogin client

OSVersion
4.0

OriginalFilename
PuTTY

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

CompanyName
Simon Tatham

CodeSize
344064

ProductName
PuTTY suite

ProductVersionNumber
0.62.0.0

FileTypeExtension
exe

ObjectFileType
Executable application

CarbonBlack CarbonBlack acts as a surveillance camera for computers
While monitoring an end-user machine in-the-wild, CarbonBlack noticed the following files in execution wrote this sample to disk.
Execution parents
PE resource-wise parents
Compressed bundles
PCAP parents
File identification
MD5 a3ccfd0aa0b17fd23aa9fd0d84b86c05
SHA1 89c19274ad51b6fbd12fb59908316088c1135307
SHA256 d4ffa4559a1e22167933772d82cf714cd4bb7a0e79511c2424e18bdb619d63a4
ssdeep
12288:J743NHanev1s4kd83ubHX2+v1g8YyCCTlaG9PnV6I:RgN6nY13ebHX2+tlNl7V6

authentihash e0517ea6c2896caa97d6cbf4e8caea00409f03703e888e83cfbc460f7682f337
imphash 74638b0911b0c9268aae1edee5a60a9f
File size 472.0 KB ( 483328 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit

TrID InstallShield setup (33.0%)
Win32 Executable MS Visual C++ (generic) (23.9%)
Win64 Executable (generic) (21.2%)
Windows Screen Saver (10.0%)
Win32 Dynamic Link Library (generic) (5.0%)
Tags
peexe

VirusTotal metadata
First submission 2011-12-10 15:52:37 UTC ( 3 years, 4 months ago )
Last submission 2015-04-26 05:28:45 UTC ( 48 minutes ago )
File names dss_5513138143498390093.3mtjfd
altb291.tmp
vs3k1trq.hgg
putty (2).exe
031620150020394464_putty.exe
altb7bf.tmp
031420151331082421_putty.exe
alta102.tmp
alt46b6.tmp
vsp708v9.tk9
alt4bae.tmp
041320151540092446_putty.exe
PUTTY.EXE
022020151559078750_putty.exe
rhaze5fnkg3pxujpwwmqqmlardarguyh.exe
2015_02_03_16_24_52.000349
112020140134536623_putty.exe
Trojan.Generic.47135.exe
alte99c.tmp
altfe24.tmp
putty-{cf547313-8adf-4ef2-a6a5-2e780caa6aa9}-v5422420.exe
path_hash-f427af82a9d33c7ee8786c2574690084c55939f755ba46ce065fc548b9e7e8ab
alt4145.tmp
121420141714358675_putty.exe
alta4db.tmp
Advanced heuristic and reputation engines
ClamAV PUA
Possibly Unwanted Application. While not necessarily malicious, the scanned file presents certain characteristics which depending on the user policies and environment may or may not represent a threat. For full details see: http://www.clamav.net/doc/pua.html .

Symantec reputation Suspicious.Insight
No comments. No VirusTotal Community member has commented on this item yet, be the first one to do so!

Leave your comment...

?
Post comment

You have not signed in. Only registered users can leave comments, sign in and have a voice!

No votes. No one has voted on this item yet, be the first one to do so!