| SHA256: | 48779f22e3788f610804d3edf0c5a0a24073534d32f8771a8a5ab2a9c5ffa6b3 |
| Nome del file: | out.exe |
| Rapporto rilevamento: | 14 / 48 |
| Data analisi: | 2013-10-06 11:02:38 UTC ( 4 anni fa ) Leggli gli ultimi |
| Antivirus | Risultato | Aggiornamento |
|---|---|---|
| AntiVir | TR/Storup.I.2 | 20131006 |
| AVG | Crypt_s.DYL | 20131006 |
| ESET-NOD32 | Win32/Boaxxe.BB | 20131006 |
| Fortinet | W32/Boaxxe.BB | 20131006 |
| Kingsoft | VIRUS_UNKNOWN | 20130829 |
| Malwarebytes | Trojan.Dropper | 20131006 |
| McAfee | Artemis!BFE8B193EDA0 | 20131006 |
| McAfee-GW-Edition | Artemis!BFE8B193EDA0 | 20131006 |
| Microsoft | Trojan:Win32/Storup.I | 20131006 |
| Panda | Suspicious file | 20131006 |
| Sophos AV | Mal/Generic-S | 20131006 |
| SUPERAntiSpyware | Trojan.Agent/Gen-FakeDefender | 20131006 |
| TrendMicro-HouseCall | TROJ_GEN.R0CBH01J513 | 20131006 |
| VIPRE | Trojan.Win32.Generic!BT | 20131006 |
| Yandex | 20131005 | |
| AhnLab-V3 | 20131005 | |
| Antiy-AVL | 20131006 | |
| Avast | 20131006 | |
| Baidu-International | 20131006 | |
| BitDefender | 20131006 | |
| Bkav | 20131005 | |
| ByteHero | 20130925 | |
| CAT-QuickHeal | 20131005 | |
| ClamAV | 20131006 | |
| Commtouch | 20131006 | |
| Comodo | 20131006 | |
| DrWeb | 20131006 | |
| Emsisoft | 20131006 | |
| F-Prot | 20131003 | |
| F-Secure | 20131006 | |
| GData | 20131006 | |
| Ikarus | 20131006 | |
| Jiangmin | 20130903 | |
| K7AntiVirus | 20131004 | |
| K7GW | 20131004 | |
| Kaspersky | 20131006 | |
| eScan | 20131006 | |
| NANO-Antivirus | 20131006 | |
| Norman | 20131006 | |
| nProtect | 20131006 | |
| PCTools | 20131002 | |
| Rising | 20130930 | |
| Symantec | 20131006 | |
| TheHacker | 20131004 | |
| TotalDefense | 20131005 | |
| TrendMicro | 20131006 | |
| VBA32 | 20131005 | |
| ViRobot | 20131005 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2009-12-05 22:50:52
Entry Point 0x000030FA
Number of sections 5
PE sections
PE imports
Number of PE resources by type
RT_DIALOG 3
RT_ICON 1
RT_MANIFEST 1
RT_GROUP_ICON 1
Number of PE resources by language
ENGLISH US 6
PE resources
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
TimeStamp
2009:12:05 23:50:52+01:00
FileType
Win32 EXE
PEType
PE32
CodeSize
24064
LinkerVersion
6.0
EntryPoint
0x30fa
InitializedDataSize
164864
SubsystemVersion
4.0
ImageVersion
6.0
OSVersion
4.0
UninitializedDataSize
1024
File identification
MD5 05de12746c1cb3c02253470d720f1726
SHA1 d2a88d0b1537dab37803813535ef5b4cf2455040
SHA256 48779f22e3788f610804d3edf0c5a0a24073534d32f8771a8a5ab2a9c5ffa6b3
ssdeep
3072:4gXdZt9P6D3XJcMQnMP6I679ec3o25E8UJxQPyLmGd:4e34flyn9vonx3d
File size
103.2 KB ( 105652 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
NSIS - Nullsoft Scriptable Install System (94.8%) Win32 Executable MS Visual C++ (generic) (3.4%) Win32 Dynamic Link Library (generic) (0.7%) Win32 Executable (generic) (0.5%) Generic Win/DOS Executable (0.2%) |
Tags
peexe
VirusTotal metadata
First submission
2013-10-06 11:02:38 UTC ( 4 anni fa )
Last submission
2013-10-14 23:03:06 UTC ( 4 anni fa )
| Nomi dei files |
out.exe vti-rescan |
Advanced heuristic and reputation engines
Symantec reputation
Suspicious.Insight
Nessun commento.
Nessun membro della Comunità di VirusTotal ha commentato questo item, sii il primo a farlo!
Non ti sei ancora collegato. Solo gli utenti registrati possono commentare, collegati ed esprimi il tuo giudizio!
Nessun voto.
Nessuno ha ancora votato questo item, sii il primo a farlo!