| SHA256: | cd8fdbf57e6e63d2a5df39fdac721492a7808910e65975ee8eba3a5121e4bb51 |
| Filnavn: | 1905214692746872240.exe |
| Deteksjonsrate: | 21 / 48 |
| Analysedato: | 2013-09-29 13:03:32 UTC ( 5 år siden ) |
| Antivirus | Resultat | Oppdatér |
|---|---|---|
| AhnLab-V3 | Trojan/Win32.Tepfer | 20130929 |
| AntiVir | TR/Crypt.ZPACK.7186 | 20130929 |
| AVG | Win32/Cryptor | 20130929 |
| BitDefender | Gen:Variant.Kazy.252405 | 20130929 |
| Bkav | HW32.CDB.5ae4 | 20130927 |
| Emsisoft | Gen:Variant.Kazy.252405 (B) | 20130929 |
| ESET-NOD32 | a variant of Win32/Kryptik.BLIJ | 20130929 |
| F-Secure | Gen:Variant.Kazy.252328 | 20130929 |
| Fortinet | W32/Kryptik.BHHU!tr | 20130929 |
| GData | Gen:Variant.Kazy.252405 | 20130929 |
| Kaspersky | HEUR:Trojan.Win32.Generic | 20130929 |
| McAfee | Artemis!93018C83ADF8 | 20130929 |
| McAfee-GW-Edition | Artemis!93018C83ADF8 | 20130928 |
| Microsoft | PWS:Win32/Fareit | 20130929 |
| eScan | Gen:Variant.Kazy.252405 | 20130929 |
| Norman | ZBot.NNAQ | 20130929 |
| Panda | Trj/Genetic.gen | 20130929 |
| Sophos AV | Mal/Generic-S | 20130929 |
| SUPERAntiSpyware | Trojan.Agent/Gen-Kazy | 20130929 |
| TrendMicro-HouseCall | TROJ_GEN.R0CBH0AIS13 | 20130929 |
| VIPRE | Trojan.Win32.Generic!BT | 20130929 |
| Yandex | 20130928 | |
| Antiy-AVL | 20130929 | |
| Avast | 20130929 | |
| Baidu-International | 20130929 | |
| ByteHero | 20130924 | |
| CAT-QuickHeal | 20130928 | |
| ClamAV | 20130929 | |
| Commtouch | 20130929 | |
| Comodo | 20130929 | |
| DrWeb | 20130929 | |
| F-Prot | 20130929 | |
| Ikarus | 20130929 | |
| Jiangmin | 20130903 | |
| K7AntiVirus | 20130927 | |
| K7GW | 20130927 | |
| Kingsoft | 20130829 | |
| Malwarebytes | 20130929 | |
| NANO-Antivirus | 20130929 | |
| nProtect | 20130929 | |
| PCTools | 20130925 | |
| Rising | 20130929 | |
| Symantec | 20130929 | |
| TheHacker | 20130929 | |
| TotalDefense | 20130927 | |
| TrendMicro | 20130929 | |
| VBA32 | 20130927 | |
| ViRobot | 20130928 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem.
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2010-09-17 07:31:07
Entry Point 0x00009D30
Number of sections 4
PE sections
PE imports
Number of PE resources by type
RT_ICON 6
RT_STRING 2
RT_GROUP_ICON 1
Number of PE resources by language
NEUTRAL 7
ENGLISH NZ 1
ENGLISH UK 1
PE resources
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
Intel 386 or later, and compatibles
TimeStamp
2010:09:17 08:31:07+01:00
FileType
Win32 EXE
PEType
PE32
CodeSize
44544
LinkerVersion
12.0
EntryPoint
0x9d30
InitializedDataSize
142848
SubsystemVersion
5.1
ImageVersion
0.0
OSVersion
5.0
UninitializedDataSize
0
File identification
MD5 93018c83adf8b4ea6067e791a33f82e4
SHA1 a1043ebb540aad7cdc6e6e0532e69743337835ec
SHA256 cd8fdbf57e6e63d2a5df39fdac721492a7808910e65975ee8eba3a5121e4bb51
ssdeep
1536:q05r1c25AHWEeS2DUTXuO8NmHkKj7+orF1w/bFKv2JnvRxVf9d3ByqbdFc:qZ2EpXJ80HD+oyJvFVdAqb7
File size
98.0 KB ( 100352 bytes )
File type Win32 EXE
Magic literal
PE32 executable for MS Windows (GUI) Intel 80386 32-bit
| TrID |
Win32 Executable MS Visual C++ (generic) (67.3%) Win32 Dynamic Link Library (generic) (14.2%) Win32 Executable (generic) (9.7%) Generic Win/DOS Executable (4.3%) DOS Executable Generic (4.3%) |
Tags
peexe
VirusTotal metadata
First submission
2013-09-29 13:03:32 UTC ( 5 år siden )
Last submission
2013-09-29 13:03:32 UTC ( 5 år siden )
| Filnavn |
1905214692746872240.exe |
Advanced heuristic and reputation engines
Symantec reputation
Suspicious.Insight
Ingen kommentarer.
Ingen av VirusTotals medlemmer har kommentert denne enheten, bli den første til å gjøre det!
Du har ikke logget inn. Bare registrerte brukere kan skrive kommentarer. Logg inn og bli hørt!
Ingen stemmer.
Ingen har stemt på denne ennå, bli den første til å gjøre det!