| SHA256: | e27a1e878fdfb3e782698c3a254cc8d93bf6abbfa74cd0d69cfb4e01b94a5020 |
| File name: | a56DgVNJtb.exe |
| Detection ratio: | 26 / 69 |
| Analysis date: | 2018-12-21 00:48:12 UTC ( 1 month, 3 weeks ago ) View latest |
| Antivirus | Result | Update |
|---|---|---|
| Acronis | malware | 20180726 |
| Ad-Aware | Gen:Variant.Graftor.451510 | 20181220 |
| ALYac | Gen:Variant.Graftor.451510 | 20181220 |
| Arcabit | Trojan.Graftor.D6E3B6 | 20181220 |
| Avast | FileRepMalware | 20181220 |
| AVG | FileRepMalware | 20181220 |
| BitDefender | Gen:Variant.Graftor.451510 | 20181220 |
| Bkav | HW32.Packed. | 20181220 |
| CrowdStrike Falcon (ML) | malicious_confidence_100% (W) | 20181022 |
| Cybereason | malicious.585e17 | 20180225 |
| eGambit | Unsafe.AI_Score_99% | 20181221 |
| Emsisoft | Gen:Variant.Graftor.451510 (B) | 20181221 |
| Endgame | malicious (high confidence) | 20181108 |
| F-Secure | Gen:Variant.Graftor.451510 | 20181221 |
| GData | Gen:Variant.Graftor.451510 | 20181221 |
| Sophos ML | heuristic | 20181128 |
| MAX | malware (ai score=87) | 20181221 |
| McAfee | Emotet-FJX!2106942585E1 | 20181220 |
| McAfee-GW-Edition | BehavesLike.Win32.Emotet.cc | 20181220 |
| Microsoft | Trojan:Win32/Fuerboos.A!cl | 20181220 |
| eScan | Gen:Variant.Graftor.451510 | 20181220 |
| Qihoo-360 | HEUR/QVM20.1.00B3.Malware.Gen | 20181221 |
| Rising | Malware.Heuristic!ET#96% (RDM+:cmRtazq7yYVqktxalHYDxB4Q3MgP) | 20181220 |
| SentinelOne (Static ML) | static engine - malicious | 20181011 |
| Symantec | ML.Attribute.HighConfidence | 20181220 |
| Trapmine | malicious.high.ml.score | 20181205 |
| AegisLab | 20181220 | |
| AhnLab-V3 | 20181220 | |
| Alibaba | 20180921 | |
| Antiy-AVL | 20181220 | |
| Avast-Mobile | 20181220 | |
| Avira (no cloud) | 20181220 | |
| Babable | 20180918 | |
| Baidu | 20181207 | |
| CAT-QuickHeal | 20181220 | |
| ClamAV | 20181220 | |
| CMC | 20181220 | |
| Comodo | 20181220 | |
| Cyren | 20181220 | |
| DrWeb | 20181221 | |
| ESET-NOD32 | 20181220 | |
| F-Prot | 20181221 | |
| Fortinet | 20181221 | |
| Ikarus | 20181221 | |
| Jiangmin | 20181221 | |
| K7AntiVirus | 20181221 | |
| K7GW | 20181221 | |
| Kaspersky | 20181220 | |
| Kingsoft | 20181221 | |
| Malwarebytes | 20181220 | |
| NANO-Antivirus | 20181220 | |
| Palo Alto Networks (Known Signatures) | 20181221 | |
| Panda | 20181220 | |
| Sophos AV | 20181220 | |
| SUPERAntiSpyware | 20181220 | |
| Symantec Mobile Insight | 20181215 | |
| TACHYON | 20181220 | |
| Tencent | 20181221 | |
| TheHacker | 20181220 | |
| TotalDefense | 20181220 | |
| TrendMicro | 20181220 | |
| TrendMicro-HouseCall | 20181220 | |
| Trustlook | 20181221 | |
| VBA32 | 20181220 | |
| ViRobot | 20181220 | |
| Webroot | 20181221 | |
| Yandex | 20181220 | |
| Zillya | 20181219 | |
| ZoneAlarm by Check Point | 20181220 | |
| Zoner | 20181220 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
Copyright © Microsoft Corp.
Internal name CTL3D32
File version 5.1.2600.2180
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2002-07-18 02:23:20
Entry Point 0x00003140
Number of sections 8
PE sections
PE imports
Number of PE resources by type
RT_VERSION 1
Number of PE resources by language
ENGLISH US 1
PE resources
Debug information
ExifTool file metadata
CodeSize
135168
UninitializedDataSize
0
LinkerVersion
12.0
ImageVersion
5.1
FileVersionNumber
5.1.2600.2180
LanguageCode
English (U.S.)
FileFlagsMask
0x003f
ImageFileCharacteristics
Executable, 32-bit
CharacterSet
Windows, Latin1
InitializedDataSize
0
EntryPoint
0x3140
MIMEType
application/octet-stream
LegalCopyright
Copyright Microsoft Corp.
FileVersion
5.1.2600.2180
TimeStamp
2002:07:18 04:23:20+02:00
FileType
Win32 EXE
PEType
PE32
InternalName
CTL3D32
ProductVersion
2,31,0,0
SubsystemVersion
6.0
OSVersion
6.0
FileOS
Windows NT 32-bit
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
CompanyName
Microsoft Corporation
LegalTrademarks
Microsoft is a registered trademark of Microsoft Corporation. Windows is a registered trademark of Microsoft Corporation.
FileSubtype
0
ProductVersionNumber
5.1.2600.2180
FileTypeExtension
exe
ObjectFileType
Dynamic link library
File identification
MD5 2106942585e1774736f7cb790bf3da1c
SHA1 2a33d8bb23a27d2dcb887c8dc054fae41e2944e7
SHA256 e27a1e878fdfb3e782698c3a254cc8d93bf6abbfa74cd0d69cfb4e01b94a5020
ssdeep
1536:NbWiUXOzuqTS13uADhd6hEvmtQ2mQuAr07WnLBwpdEdsCX8yirb:3NTS1/rSkmWalVm6dst
File size
124.0 KB ( 126976 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Dynamic Link Library (generic) (38.4%) Win32 Executable (generic) (26.3%) OS/2 Executable (generic) (11.8%) Generic Win/DOS Executable (11.6%) DOS Executable Generic (11.6%) |
Tags
peexe
VirusTotal metadata
First submission
2018-12-21 00:43:57 UTC ( 1 month, 3 weeks ago )
Last submission
2018-12-21 01:00:44 UTC ( 1 month, 3 weeks ago )
| File names |
output.114757088.txt a56DgVNJtb.exe AUqwh1rZIW3h.exe Ucy2J333gxgQ.exe CTL3D32 xdvxivdxCZ1.exe KPubSN1UH6oh.exe 8F55pge6.exe tWG0RNSLRrl.exe GnAHVjHE.exe VehJb9cn5NR.exe |
No comments.
No VirusTotal Community member has commented on this item yet, be the first one to do so!
You have not signed in. Only registered users can leave comments, sign in and have a voice!
No votes.
No one has voted on this item yet, be the first one to do so!