× Cookies er deaktivert! Denne siden krever at cookies er aktivert for å fungere optimalt.
SHA256: ceb5aa4b6fd5bf23e9aee9b82531d6f2d48f36e3541aef0879410cd67a9451e0
Filnavn: Facebook Credits Generator.exe
Deteksjonsrate: 0 / 42
Analysedato: 2012-05-06 12:45:03 UTC ( 5 år, 5 måneder siden )
Antivirus Resultat Oppdatér
AhnLab-V3 20120505
AntiVir 20120504
Antiy-AVL 20120506
Avast 20120506
AVG 20120506
BitDefender 20120506
ByteHero 20120505
CAT-QuickHeal 20120505
ClamAV 20120506
Commtouch 20120506
Comodo 20120505
DrWeb 20120506
Emsisoft 20120506
eSafe 20120502
eTrust-Vet 20120504
F-Prot 20120506
F-Secure 20120506
Fortinet 20120506
GData 20120506
Ikarus 20120506
Jiangmin 20120506
K7AntiVirus 20120505
Kaspersky 20120506
McAfee 20120506
McAfee-GW-Edition 20120505
Microsoft 20120506
NOD32 20120506
Norman 20120506
nProtect 20120506
Panda 20120506
PCTools 20120506
Rising 20120504
Sophos AV 20120506
SUPERAntiSpyware 20120411
Symantec 20120506
TheHacker 20120505
TrendMicro 20120506
TrendMicro-HouseCall 20120506
VBA32 20120504
VIPRE 20120506
ViRobot 20120506
VirusBuster 20120506
The file being studied is a Portable Executable file! More specifically, it is a Win32 EXE file for the Windows GUI subsystem.
Packers identified
F-PROT RAR
PE header basic information
Target machine Intel 386 or later processors and compatible processors
Compilation timestamp 2010-03-15 06:27:50
Entry Point 0x0000A7B1
Number of sections 5
PE sections
PE imports
LookupPrivilegeValueA, RegOpenKeyExA, RegQueryValueExA, RegCreateKeyExA, RegSetValueExA, RegCloseKey, SetFileSecurityW, SetFileSecurityA, OpenProcessToken, AdjustTokenPrivileges
GetSaveFileNameA, CommDlgExtendedError, GetOpenFileNameA
GetDeviceCaps, GetObjectA, CreateCompatibleBitmap, SelectObject, StretchBlt, CreateCompatibleDC, DeleteObject, DeleteDC
DeleteFileA, DeleteFileW, CreateDirectoryA, CreateDirectoryW, FindClose, FindNextFileA, FindFirstFileA, FindNextFileW, FindFirstFileW, GetTickCount, WideCharToMultiByte, MultiByteToWideChar, GetVersionExA, GlobalAlloc, lstrlenA, GetModuleFileNameA, FindResourceA, GetModuleHandleA, HeapAlloc, GetProcessHeap, HeapFree, HeapReAlloc, CompareStringA, ExitProcess, GetLocaleInfoA, GetNumberFormatA, lstrcmpiA, GetProcAddress, GetDateFormatA, GetTimeFormatA, FileTimeToSystemTime, FileTimeToLocalFileTime, ExpandEnvironmentStringsA, WaitForSingleObject, SetCurrentDirectoryA, Sleep, GetTempPathA, MoveFileExA, UnmapViewOfFile, GetCommandLineA, MapViewOfFile, CreateFileMappingA, GetModuleFileNameW, SetEnvironmentVariableA, OpenFileMappingA, LocalFileTimeToFileTime, SystemTimeToFileTime, GetSystemTime, IsDBCSLeadByte, GetCPInfo, FreeLibrary, LoadLibraryA, GetCurrentDirectoryA, GetFullPathNameA, SetFileAttributesW, SetFileAttributesA, GetFileAttributesW, GetFileAttributesA, WriteFile, SetLastError, GetStdHandle, ReadFile, CreateFileW, CreateFileA, GetFileType, SetEndOfFile, SetFilePointer, MoveFileA, SetFileTime, GetCurrentProcess, CloseHandle, GetLastError, DosDateTimeToFileTime
ShellExecuteExA, SHFileOperationA, SHGetFileInfoA, SHGetSpecialFolderLocation, SHGetMalloc, SHBrowseForFolderA, SHGetPathFromIDListA, SHChangeNotify
ReleaseDC, GetDC, SendMessageA, wsprintfA, SetDlgItemTextA, EndDialog, DestroyIcon, SendDlgItemMessageA, GetDlgItemTextA, DialogBoxParamA, IsWindowVisible, WaitForInputIdle, GetSysColor, PostMessageA, SetMenu, SetFocus, LoadBitmapA, LoadIconA, CharToOemA, OemToCharA, GetClassNameA, CharUpperA, GetWindowRect, GetParent, MapWindowPoints, CreateWindowExA, UpdateWindow, SetWindowTextA, LoadCursorA, RegisterClassExA, SetWindowLongA, GetWindowLongA, DefWindowProcA, PeekMessageA, GetMessageA, TranslateMessage, DispatchMessageA, GetClientRect, CopyRect, IsWindow, MessageBoxA, ShowWindow, GetDlgItem, EnableWindow, FindWindowExA, wvsprintfA, CharToOemBuffA, LoadStringA, SetWindowPos, GetWindowTextA, GetWindow, GetSystemMetrics, OemToCharBuffA, DestroyWindow
CreateStreamOnHGlobal, OleInitialize, CoCreateInstance, OleUninitialize, CLSIDFromString
ExifTool file metadata
MIMEType
application/octet-stream

Subsystem
Windows GUI

MachineType
Intel 386 or later, and compatibles

TimeStamp
2010:03:14 23:27:50-07:00

FileType
Win32 EXE

PEType
PE32

CodeSize
67584

LinkerVersion
9.0

EntryPoint
0xa7b1

InitializedDataSize
72704

SubsystemVersion
4.0

ImageVersion
0.0

OSVersion
5.0

UninitializedDataSize
0

File identification
MD5 4ed7285fcc622856f65514a7b17aa4bd
SHA1 e054a2a89238380b456cc3334af7372f09991c47
SHA256 ceb5aa4b6fd5bf23e9aee9b82531d6f2d48f36e3541aef0879410cd67a9451e0
ssdeep
98304:LuvuN++3xLJh6r6B/kAGSAvtDkhwYZUbT5:/NJh6r6lkAGrtD+bS

File size 3.1 MB ( 3238903 bytes )
File type Win32 EXE
Magic literal
MS-DOS executable PE for MS Windows (GUI) Intel 80386 32-bit

TrID Win64 Executable Generic (59.6%)
Win32 Executable MS Visual C++ (generic) (26.2%)
Win32 Executable Generic (5.9%)
Win32 Dynamic Link Library (generic) (5.2%)
Generic Win/DOS Executable (1.3%)
VirusTotal metadata
First submission 2012-05-06 12:45:03 UTC ( 5 år, 5 måneder siden )
Last submission 2012-05-06 12:45:03 UTC ( 5 år, 5 måneder siden )
Filnavn Facebook Credits Generator.exe
Advanced heuristic and reputation engines
Symantec reputation Suspicious.Insight
Ingen kommentarer. Ingen av VirusTotals medlemmer har kommentert denne enheten, bli den første til å gjøre det!

Skriv en kommentar...

?
Send kommentar

Du har ikke logget inn. Bare registrerte brukere kan skrive kommentarer. Logg inn og bli hørt!

Ingen stemmer. Ingen har stemt på denne ennå, bli den første til å gjøre det!