| SHA256: | 231b7a04ab898dc3b1595311d409caafc423b1aa23910f19df402abe627e8434 |
| Nom du fichier : | iscsmcbu.exe |
| Ratio de détection : | 11 / 60 |
| Date d'analyse : | 2017-04-27 13:23:40 UTC (il y a 12 mois) Voir les derniers |
| Antivirus | Résultat | Mise à jour |
|---|---|---|
| AegisLab | Ml.Attribute.Gen!c | 20170427 |
| Baidu | Win32.Trojan.WisdomEyes.16070401.9500.9999 | 20170427 |
| CrowdStrike Falcon (ML) | malicious_confidence_64% (W) | 20170130 |
| Endgame | malicious (high confidence) | 20170419 |
| Sophos ML | virus.win32.sality.at | 20170413 |
| Kaspersky | UDS:DangerousObject.Multi.Generic | 20170427 |
| Palo Alto Networks (Known Signatures) | generic.ml | 20170427 |
| Symantec | Trojan.Gen.8!cloud | 20170427 |
| VBA32 | Malware-Cryptor.Limpopo | 20170427 |
| Webroot | W32.Trojan.Gen | 20170427 |
| ZoneAlarm by Check Point | UDS:DangerousObject.Multi.Generic | 20170427 |
| Ad-Aware | 20170427 | |
| AhnLab-V3 | 20170427 | |
| Alibaba | 20170427 | |
| ALYac | 20170427 | |
| Antiy-AVL | 20170427 | |
| Arcabit | 20170427 | |
| Avast | 20170427 | |
| AVG | 20170427 | |
| Avira (no cloud) | 20170427 | |
| AVware | 20170427 | |
| BitDefender | 20170427 | |
| CAT-QuickHeal | 20170426 | |
| ClamAV | 20170427 | |
| CMC | 20170427 | |
| Comodo | 20170427 | |
| Cyren | 20170427 | |
| DrWeb | 20170427 | |
| Emsisoft | 20170427 | |
| ESET-NOD32 | 20170427 | |
| F-Prot | 20170427 | |
| F-Secure | 20170427 | |
| Fortinet | 20170427 | |
| GData | 20170427 | |
| Ikarus | 20170427 | |
| Jiangmin | 20170427 | |
| K7AntiVirus | 20170427 | |
| K7GW | 20170426 | |
| Kingsoft | 20170427 | |
| Malwarebytes | 20170427 | |
| McAfee | 20170427 | |
| McAfee-GW-Edition | 20170427 | |
| Microsoft | 20170427 | |
| eScan | 20170427 | |
| NANO-Antivirus | 20170427 | |
| nProtect | 20170427 | |
| Panda | 20170426 | |
| Qihoo-360 | 20170427 | |
| Rising | None | |
| SentinelOne (Static ML) | 20170330 | |
| Sophos AV | 20170427 | |
| SUPERAntiSpyware | 20170427 | |
| Symantec Mobile Insight | 20170427 | |
| Tencent | 20170427 | |
| TheHacker | 20170424 | |
| TrendMicro | 20170427 | |
| TrendMicro-HouseCall | 20170427 | |
| Trustlook | 20170427 | |
| VIPRE | 20170427 | |
| ViRobot | 20170427 | |
| WhiteArmor | 20170409 | |
| Yandex | 20170426 | |
| Zillya | 20170426 | |
| Zoner | 20170427 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
FileVersionInfo properties
Copyright
ManiacTools (c). All rights reserved.
Product TurnpikeAttendant
Original name TurnpikeAttendant
Internal name TurnpikeAttendant
File version 4.6.26.8
Description Coaching Instances Megaflops Wap Love Technet
Comments Coaching Instances Megaflops Wap Love Technet
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2017-04-27 09:13:50
Entry Point 0x0000BBE7
Number of sections 4
PE sections
PE imports
PE exports
Number of PE resources by type
RT_DIALOG 12
RT_BITMAP 9
RT_ICON 6
RT_STRING 4
BINARY 2
Struct(700) 2
RT_MANIFEST 1
RT_VERSION 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 38
PE resources
Debug information
ExifTool file metadata
CodeSize
111616
SubsystemVersion
5.1
Comments
Coaching Instances Megaflops Wap Love Technet
InitializedDataSize
324608
ImageVersion
0.0
ProductName
TurnpikeAttendant
FileVersionNumber
4.6.26.8
UninitializedDataSize
0
LanguageCode
English (U.S.)
FileFlagsMask
0x003f
CharacterSet
Unicode
LinkerVersion
11.0
FileTypeExtension
exe
OriginalFileName
TurnpikeAttendant
MIMEType
application/octet-stream
Subsystem
Windows GUI
FileVersion
4.6.26.8
TimeStamp
2017:04:27 10:13:50+01:00
FileType
Win32 EXE
PEType
PE32
InternalName
TurnpikeAttendant
ProductVersion
4.6.26.8
FileDescription
Coaching Instances Megaflops Wap Love Technet
OSVersion
5.1
FileOS
Windows NT 32-bit
LegalCopyright
ManiacTools (c). All rights reserved.
MachineType
Intel 386 or later, and compatibles
CompanyName
ManiacTools
LegalTrademarks
ManiacTools (c). All rights reserved.
FileSubtype
0
ProductVersionNumber
4.6.26.8
EntryPoint
0xbbe7
ObjectFileType
Executable application
Compressed bundles
File identification
MD5 671f202b066ea3f1aebba3ccc13cd7e1
SHA1 89f9989be94ddff9a1e9f132adaca87efe09bf0e
SHA256 231b7a04ab898dc3b1595311d409caafc423b1aa23910f19df402abe627e8434
ssdeep
6144:DilH8P0Nc/rAsK68LQVePxwPogZ5h55KL0rOdVjrHD5:DilHU0m/ssb8LQVeZyJ55u2Od3
File size
427.0 KB ( 437248 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win64 Executable (generic) (76.4%) Win32 Executable (generic) (12.4%) Generic Win/DOS Executable (5.5%) DOS Executable Generic (5.5%) |
Tags
peexe
VirusTotal metadata
First submission
2017-04-27 11:28:23 UTC (il y a 12 mois)
Last submission
2017-08-17 10:47:33 UTC (il y a 8 mois, 1 semaine)
| Noms du fichier |
google_gmail.exe 231b7a04ab898dc3b1595311d409caafc423b1aa23910f19df402abe627e8434.bin localfile~ TurnpikeAttendant 671f202b066ea3f1aebba3ccc13cd7e1 iscsmcbu.exe radE88EF.tmp.pif |
Aucun commentaire.
Aucun membre de la communauté VirusTotal n'a encore commenté cet élément, soyez le premier à le faire !
Vous n'êtes pas connecté. Seuls les utilisateurs enregistrés peuvent laisser des commentaires, connectez-vous pour commenter !
Aucun vote.
Personne n'a encore voté pour cet élément, soyez le premier à le faire !
Condensed report! The following is a condensed report of the
behaviour of the file when executed in a controlled environment. The actions
and events described were either performed by the file itself or by any other
process launched by the executed file or subjected to code injection by the
executed file.