| SHA256: | dbd88a7d2e62b02bc599f4102be44d790a8d683eab6a8dba3536d08f78ed6ecc |
| File name: | batthyper.exe |
| Detection ratio: | 20 / 66 |
| Analysis date: | 2018-05-26 18:50:45 UTC ( 8 months, 3 weeks ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| AegisLab | Ml.Attribute.Gen!c | 20180526 |
| AhnLab-V3 | Trojan/Win32.Emotet.R228996 | 20180525 |
| Avast | FileRepMalware | 20180526 |
| AVG | FileRepMalware | 20180526 |
| Baidu | Win32.Trojan.WisdomEyes.16070401.9500.9999 | 20180526 |
| Comodo | CloudScanner.Trojan.Gen | 20180526 |
| Cylance | Unsafe | 20180526 |
| Endgame | malicious (high confidence) | 20180507 |
| Sophos ML | heuristic | 20180503 |
| K7GW | Trojan ( 700001211 ) | 20180526 |
| Kaspersky | UDS:DangerousObject.Multi.Generic | 20180526 |
| Malwarebytes | Spyware.PasswordStealer | 20180526 |
| MAX | malware (ai score=94) | 20180526 |
| McAfee | Artemis!F6607FAFF2E8 | 20180526 |
| McAfee-GW-Edition | Artemis!Trojan | 20180526 |
| Palo Alto Networks (Known Signatures) | generic.ml | 20180526 |
| SentinelOne (Static ML) | static engine - malicious | 20180225 |
| Symantec | ML.Attribute.HighConfidence | 20180526 |
| Webroot | W32.Trojan.Emotet | 20180526 |
| ZoneAlarm by Check Point | UDS:DangerousObject.Multi.Generic | 20180526 |
| Ad-Aware | 20180526 | |
| Alibaba | 20180525 | |
| ALYac | 20180526 | |
| Antiy-AVL | 20180526 | |
| Arcabit | 20180526 | |
| Avast-Mobile | 20180525 | |
| Avira (no cloud) | 20180526 | |
| AVware | 20180526 | |
| Babable | 20180406 | |
| BitDefender | 20180526 | |
| Bkav | 20180525 | |
| CAT-QuickHeal | 20180525 | |
| ClamAV | 20180526 | |
| CMC | 20180526 | |
| CrowdStrike Falcon (ML) | 20180202 | |
| Cybereason | None | |
| Cyren | 20180526 | |
| DrWeb | 20180526 | |
| eGambit | 20180526 | |
| Emsisoft | 20180526 | |
| ESET-NOD32 | 20180526 | |
| F-Prot | 20180526 | |
| F-Secure | 20180526 | |
| Fortinet | 20180526 | |
| GData | 20180526 | |
| Ikarus | 20180526 | |
| Jiangmin | 20180526 | |
| K7AntiVirus | 20180526 | |
| Kingsoft | 20180526 | |
| Microsoft | 20180526 | |
| eScan | 20180526 | |
| NANO-Antivirus | 20180526 | |
| nProtect | 20180526 | |
| Panda | 20180525 | |
| Qihoo-360 | 20180526 | |
| Rising | 20180525 | |
| Sophos AV | 20180526 | |
| SUPERAntiSpyware | 20180526 | |
| Symantec Mobile Insight | 20180525 | |
| Tencent | 20180526 | |
| TheHacker | 20180524 | |
| TotalDefense | 20180526 | |
| TrendMicro | 20180526 | |
| TrendMicro-HouseCall | 20180526 | |
| Trustlook | 20180526 | |
| VBA32 | 20180525 | |
| VIPRE | 20180526 | |
| ViRobot | 20180526 | |
| Yandex | 20180524 | |
| Zillya | 20180525 | |
| Zoner | 20180526 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2028-12-25 04:27:37
Entry Point 0x00002132
Number of sections 4
PE sections
PE imports
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
JAPANESE DEFAULT 1
PE resources
ExifTool file metadata
UninitializedDataSize
0
LinkerVersion
12.164
ImageVersion
0.0
FileVersionNumber
1.0.124.0
LanguageCode
Japanese
FileFlagsMask
0x003f
ImageFileCharacteristics
No relocs, Executable, 32-bit, System file
CharacterSet
Unicode
InitializedDataSize
192512
EntryPoint
0x2132
MIMEType
application/octet-stream
TimeStamp
2028:12:25 05:27:37+01:00
FileType
Win32 EXE
PEType
PE32
SubsystemVersion
5.0
OSVersion
5.0
FileOS
Win32
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
25 4 3
CodeSize
0
FileSubtype
0
ProductVersionNumber
24.0.55.0
FileTypeExtension
exe
ObjectFileType
Dynamic link library
Compressed bundles
File identification
MD5 f6607faff2e848d6048b2a7f73aeeb31
SHA1 24a5112f841fe1b9def63f716313f13d4673e579
SHA256 dbd88a7d2e62b02bc599f4102be44d790a8d683eab6a8dba3536d08f78ed6ecc
ssdeep
3072:+qtXSSP5wlXqKCkxoPYGwLjMHO4Lxl8K6:+wXSSP5IN3oQ72Lz
File size
208.0 KB ( 212992 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit system file
| TrID |
Win32 Executable (generic) (35.7%) Win16/32 Executable Delphi generic (16.4%) OS/2 Executable (generic) (16.0%) Generic Win/DOS Executable (15.8%) DOS Executable Generic (15.8%) |
Tags
peexe
VirusTotal metadata
First submission
2018-05-26 15:11:49 UTC ( 8 months, 3 weeks ago )
Last submission
2018-07-12 06:43:51 UTC ( 7 months, 1 week ago )
| File names |
output.113339869.txt batthyper.exe 53325.exe 41985.exe 14116.exe 11915.exe 89399.exe 61272.exe 20134.exe output.113378226.txt 98711.exe 06190.exe 26546.exe extiddefrag(77).gxe 8260029556102ac7082453e2d4e345500a62c126 output.113378225.txt 6415.exe 2307.exe 36746.exe 9193.exe 32142.exe |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!