| SHA256: | dc36d538b7a1ee404dfd6e104b9a1edd7046526e55b3f911beea2b422a0eb625 |
| Filnavn: | unknown.exe |
| Deteksjonsrate: | 26 / 45 |
| Analysedato: | 2013-08-11 08:55:52 UTC ( 3 år, 10 måneder siden ) Se siste |
| Antivirus | Resultat | Oppdatér |
|---|---|---|
| AntiVir | TR/Crypt.XPACK.Gen | 20130811 |
| Avast | Win32:Malware-gen | 20130811 |
| BitDefender | Trojan.Generic.8975894 | 20130811 |
| Commtouch | W64/Backdoor.XTZT-5519 | 20130811 |
| Comodo | UnclassifiedMalware | 20130811 |
| DrWeb | Trojan.Rodricter.58 | 20130811 |
| Emsisoft | Trojan.Win64.Kryptik (A) | 20130811 |
| ESET-NOD32 | a variant of Win64/Kryptik.BQ | 20130811 |
| F-Secure | Trojan.Generic.8975894 | 20130811 |
| Fortinet | W64/Simda.BD!tr | 20130811 |
| GData | Trojan.Generic.8975894 | 20130811 |
| Ikarus | Trojan.SuspectCRC | 20130811 |
| K7AntiVirus | Riskware | 20130809 |
| K7GW | Riskware | 20130809 |
| Kaspersky | UDS:DangerousObject.Multi.Generic | 20130811 |
| Malwarebytes | Trojan.Agent.NR | 20130811 |
| McAfee | Generic.dx!464F4C647761 | 20130811 |
| McAfee-GW-Edition | Generic.dx!464F4C647761 | 20130811 |
| NANO-Antivirus | Trojan.Win64.Rodricter.bpfoyo | 20130811 |
| Norman | Troj_Generic.KMUXZ | 20130811 |
| Panda | Trj/OCJ.E | 20130810 |
| Symantec | WS.Reputation.1 | 20130811 |
| TheHacker | Trojan/Kryptik.bq | 20130810 |
| TrendMicro | TROJ_GEN.R6ACFDU | 20130811 |
| TrendMicro-HouseCall | TROJ_GEN.R6ACFDU | 20130811 |
| VIPRE | Backdoor.Win64.Simda.e (v) | 20130811 |
| Yandex | 20130810 | |
| AhnLab-V3 | 20130810 | |
| Antiy-AVL | 20130810 | |
| AVG | 20130810 | |
| ByteHero | 20130724 | |
| CAT-QuickHeal | 20130808 | |
| ClamAV | 20130811 | |
| F-Prot | 20130811 | |
| Jiangmin | 20130811 | |
| Kingsoft | 20130723 | |
| Microsoft | 20130811 | |
| eScan | 20130811 | |
| nProtect | 20130811 | |
| PCTools | 20130811 | |
| Rising | 20130809 | |
| SUPERAntiSpyware | 20130810 | |
| TotalDefense | 20130809 | |
| VBA32 | 20130809 | |
| ViRobot | 20130810 |
The file being studied is a Portable Executable file!
More specifically, it is a Win32 EXE
file
for the Windows GUI subsystem
that targets 64bit architectures.
PE header basic information
Target machine x64
Compilation timestamp 2010-02-26 07:43:11
Entry Point 0x00001068
Number of sections 5
PE sections
PE imports
ExifTool file metadata
MIMEType
application/octet-stream
Subsystem
Windows GUI
MachineType
AMD AMD64
TimeStamp
2010:02:26 08:43:11+01:00
FileType
Win64 EXE
PEType
PE32+
CodeSize
12288
LinkerVersion
5.0
FileAccessDate
2014:05:16 17:17:42+01:00
EntryPoint
0x1068
InitializedDataSize
397312
SubsystemVersion
4.0
ImageVersion
0.0
OSVersion
4.0
FileCreateDate
2014:05:16 17:17:42+01:00
UninitializedDataSize
0
File identification
MD5 464f4c6477613aaaf1f8195b5e77cab0
SHA1 59d83ad05c6fb4ef1d17636692fa8cd9c60fffc1
SHA256 dc36d538b7a1ee404dfd6e104b9a1edd7046526e55b3f911beea2b422a0eb625
ssdeep
3072:F9POz49Ls/lGdLmirORfqfPChQ88OYZKaFectI1OURm/DjCnU8i68i+Yjt4NPsl:uzSLWlG6yfPCt8nEOtKKCnx86J4Bsz
File size
173.5 KB ( 177664 bytes )
File type Win32 EXE
Magic literal
PE32+ executable for MS Windows (GUI)
| TrID |
Generic Win/DOS Executable (49.9%) DOS Executable Generic (49.8%) Autodesk FLIC Image File (extensions: flc, fli, cel) (0.1%) |
Tags
64bits
peexe
VirusTotal metadata
First submission
2013-04-19 15:10:28 UTC ( 4 år, 2 måneder siden )
Last submission
2014-05-16 16:14:44 UTC ( 3 år, 1 måned siden )
| Filnavn |
po.exe 1438bh51ova3si-0.exe 464f4c6477613aaaf1f8195b5e77cab0 unknown.exe |
Advanced heuristic and reputation engines
Symantec reputation
Suspicious.Insight
Ingen kommentarer.
Ingen av VirusTotals medlemmer har kommentert denne enheten, bli den første til å gjøre det!
Du har ikke logget inn. Bare registrerte brukere kan skrive kommentarer. Logg inn og bli hørt!
Ingen stemmer.
Ingen har stemt på denne ennå, bli den første til å gjøre det!