| SHA256: | a6e259952a181a26a237f20293687fe365895f7a3cd8047675f09d49bd06851e |
| שם קובץ: | l3g33333.exe |
| יחס זיהוי: | 17 / 48 |
| תאריך ניתוח: | 2013-09-29 17:45:18 UTC ( 3 שנים, 9 חודשים לפני ) |
| אנטי־וירוס | תוצאה | עדכן |
|---|---|---|
| AhnLab-V3 | Trojan/Win32.Fareit | 20130929 |
| AVG | FakeAV_s.ANH | 20130929 |
| Emsisoft | Gen:Variant.Graftor.116195 (B) | 20130929 |
| ESET-NOD32 | Win32/AdWare.FakeAV.K | 20130929 |
| F-Secure | Gen:Variant.Graftor.116195 | 20130929 |
| Fortinet | W32/Kryptik.BDPK!tr | 20130929 |
| GData | Gen:Variant.Graftor.116195 | 20130929 |
| Kingsoft | Win32.Troj.Generic.a.(kcloud) | 20130829 |
| Malwarebytes | Trojan.Agent.rfz | 20130929 |
| McAfee | FakeAlert-FRG!96A8901B0FF0 | 20130929 |
| McAfee-GW-Edition | FakeAlert-FRG!96A8901B0FF0 | 20130928 |
| Microsoft | Rogue:Win32/Winwebsec | 20130929 |
| eScan | Gen:Variant.Graftor.116195 | 20130929 |
| Norman | Urausy.RY | 20130929 |
| Sophos AV | Troj/Zbot-GKZ | 20130929 |
| SUPERAntiSpyware | Trojan.Agent/Gen-Winwebsec | 20130929 |
| VIPRE | Trojan.Win32.Generic!BT | 20130929 |
| Yandex | 20130929 | |
| AntiVir | 20130929 | |
| Antiy-AVL | 20130929 | |
| Avast | 20130929 | |
| Baidu-International | 20130929 | |
| BitDefender | 20130929 | |
| Bkav | 20130927 | |
| ByteHero | 20130924 | |
| CAT-QuickHeal | 20130929 | |
| ClamAV | 20130929 | |
| Commtouch | 20130929 | |
| Comodo | 20130929 | |
| DrWeb | 20130929 | |
| F-Prot | 20130929 | |
| Ikarus | 20130929 | |
| Jiangmin | 20130903 | |
| K7AntiVirus | 20130927 | |
| K7GW | 20130927 | |
| Kaspersky | 20130929 | |
| NANO-Antivirus | 20130929 | |
| nProtect | 20130929 | |
| Panda | 20130929 | |
| PCTools | 20130925 | |
| Rising | 20130929 | |
| Symantec | 20130929 | |
| TheHacker | 20130929 | |
| TotalDefense | 20130927 | |
| TrendMicro | 20130929 | |
| TrendMicro-HouseCall | 20130929 | |
| VBA32 | 20130927 | |
| ViRobot | 20130929 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
Authenticode signature block and FileVersionInfo properties
Publisher Ingenieursbureau Matrix B.V.
Signature verification
Signed file, verified signature
Signing date 6:45 PM 9/29/2013
| Signers |
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2007-04-18 11:23:51
Entry Point 0x00003A5C
Number of sections 4
PE sections
PE imports
Number of PE resources by type
RT_ICON 3
RT_MANIFEST 1
RT_RCDATA 1
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 6
PE resources
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
TimeStamp
2007:04:18 12:23:51+01:00
FileType
Win32 EXE
PEType
PE32
CodeSize
16112
LinkerVersion
7.56
EntryPoint
0x3a5c
InitializedDataSize
20480
SubsystemVersion
4.0
ImageVersion
0.0
OSVersion
4.0
UninitializedDataSize
0
File identification
MD5 96a8901b0ff0c49bbb7bf9b5221f1399
SHA1 1d84b52314fc8b0832a341ab48d0ab016cb35deb
SHA256 a6e259952a181a26a237f20293687fe365895f7a3cd8047675f09d49bd06851e
ssdeep
12288:G3Olr4MezCQl8f6GYzLIQqe1gvKg66HkCA5swcgj1pBJR:C9DT2f6G0Wu6HVA5swDT
קודל קובץ
527.6 ק"ב ( 540312 bytes )
סוג קובץ Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Dynamic Link Library (generic) (38.2%) Win32 Executable (generic) (26.2%) Win16/32 Executable Delphi generic (12.0%) Generic Win/DOS Executable (11.6%) DOS Executable Generic (11.6%) |
Tags
peexe
signed
VirusTotal metadata
First submission
2013-09-29 17:45:18 UTC ( 3 שנים, 9 חודשים לפני )
Last submission
2013-09-29 17:45:18 UTC ( 3 שנים, 9 חודשים לפני )
| שמות קבצים |
l3g33333.exe |
אין תגובות.
אף חבר קהילה של VirusTotal הגיב על הפריט הזה. היה הראשון לעשות זאת!
אתה לא מחובר. רק משתמשים רשומים יכולים להשאיר תגובה. והתחבר והראה את קולך!
אין הצבעות.
אף אחד לא הצביע על קובץ זה. היה הראשון לעשות זאת!