http://www.virustotal.com/file-scan/...8b9-1291951997
Antivirus Version Last Update Result
AhnLab-V3 2010.12.10.00 2010.12.09 -
AntiVir 7.10.14.244 2010.12.09 -
Antiy-AVL 2.0.3.7 2010.12.10 -
Avast 4.8.1351.0 2010.12.10 -
Avast5 5.0.677.0 2010.12.10 -
AVG 9.0.0.851 2010.12.10 -
BitDefender 7.2 2010.12.10 -
CAT-QuickHeal 11.00 2010.12.10 -
ClamAV 0.96.4.0 2010.12.10 -
Command 5.2.11.5 2010.12.10 -
Comodo 7008 2010.12.10 -
DrWeb 5.0.2.03300 2010.12.10 -
Emsisoft 5.1.0.1 2010.12.10 -
eSafe 7.0.17.0 2010.12.09 -
eTrust-Vet 36.1.8032 2010.12.10 -
F-Prot 4.6.2.117 2010.12.09 -
F-Secure 9.0.16160.0 2010.12.10 -
Fortinet 4.2.254.0 2010.12.09 -
GData 21 2010.12.10 -
Ikarus T3.1.1.90.0 2010.12.10 -
Jiangmin 13.0.900 2010.12.09 -
K7AntiVirus 9.71.3200 2010.12.09 -
Kaspersky 7.0.0.125 2010.12.10 -
McAfee 5.400.0.1158 2010.12.10 -
McAfee-GW-Edition 2010.1C 2010.12.09 -
Microsoft 1.6402 2010.12.10 -
NOD32 5690 2010.12.10 -
Norman 6.06.12 2010.12.10 -
nProtect 2010-12-09.01 2010.12.09 -
Panda 10.0.2.7 2010.12.09 -
PCTools 7.0.3.5 2010.12.10 -
Prevx 3.0 2010.12.10 -
Rising 22.77.03.06 2010.12.10 -
Sophos 4.60.0 2010.12.09 Sus/Behav-200
SUPERAntiSpyware 4.40.0.1006 2010.12.10 -
Symantec 20101.3.0.103 2010.12.10 -
TheHacker 6.7.0.1.097 2010.12.09 -
TrendMicro 9.120.0.1004 2010.12.09 PAK_Generic.001
TrendMicro-HouseCall 9.120.0.1004 2010.12.10 -
VBA32 3.12.14.2 2010.12.09 -
VIPRE 7584 2010.12.10 -
ViRobot 2010.12.9.4193 2010.12.09 -
VirusBuster 13.6.84.1 2010.12.09 -
Additional information
Show all
MD5 : 1d584363b02c624942f1a52379c2b6bf
SHA1 : 98947acaf4bd8cf78e849421b68b73f7ee578e8a
SHA256: d3e1b25c4145a2398ff2ab83bf0ccf84fb8455968eb77bc412 f8729428c6d8b9
ssdeep: 24576:X0kdE/CZrRXABsShY3PqT1H11KPDUU92RbjCdd51insuAp6PPNZrZW8/eYr:hKax8YfqT
J11ioU92RbOX51inip6PPYY
File size : 1110016 bytes
First seen: 2010-12-10 03:33:17
Last seen : 2010-12-10 03:33:17
TrID:
UPX compressed Win32 Executable (39.5%)
Win32 EXE Yoda's Crypter (34.3%)
Win32 Executable Generic (11.0%)
Win32 Dynamic Link Library (generic) (9.8%)
Generic Win/DOS Executable (2.5%)
sigcheck:
publisher....: sharemind.us
copyright....: nina@sharemind 2010
product......: _S__M_ ShareMind Injection V.2.5
description..: n/a
original name: _S__M_ ShareMind Injection V.2.6.exe
internal name: _S__M_ ShareMind Injection V.2.6
file version.: 2.06
comments.....: sharemind Injector By nina
signers......: -
signing date.: -
verified.....: Unsigned
PEiD: UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser
packers (F-Prot): UPX
packers (Kaspersky): UPX
PEInfo: PE structure information
[[ basic data ]]
entrypointaddress: 0x12CB80
timedatestamp....: 0x4D019B97 (Fri Dec 10 03:16:39 2010)
machinetype......: 0x14c (I386)
[[ 3 section(s) ]]
name, viradd, virsiz, rawdsiz, ntropy, md5
UPX0, 0x1000, 0x2E000, 0x0, 0.00, d41d8cd98f00b204e9800998ecf8427e
UPX1, 0x2F000, 0xFE000, 0xFDE00, 7.81, 2e204dbc67925aad17846262ef8afb6d
.rsrc, 0x12D000, 0x11000, 0x10E00, 4.71, c5e94fab448a817efe22e5c70a450dcf
[[ 2 import(s) ]]
KERNEL32.DLL: LoadLibraryA, GetProcAddress, VirtualProtect, ExitProcess
MSVBVM60.DLL: -
ExifTool:
file metadata
CharacterSet: Unicode
CodeSize: 1040384
Comments: sharemind Injector By nina
CompanyName: sharemind.us
EntryPoint: 0x12cb80
FileFlagsMask: 0x0000
FileOS: Win32
FileSize: 1084 kB
FileSubtype: 0
FileType: Win32 EXE
FileVersion: 2.06
FileVersionNumber: 2.6.0.0
ImageVersion: 2.6
InitializedDataSize: 69632
InternalName: [S][M] ShareMind Injection V.2.6
LanguageCode: English (U.S.)
LegalCopyright: nina@sharemind 2010
LinkerVersion: 6.0
MIMEType: application/octet-stream
MachineType: Intel 386 or later, and compatibles
OSVersion: 4.0
ObjectFileType: Executable application
OriginalFilename: [S][M] ShareMind Injection V.2.6.exe
PEType: PE32
ProductName: [S][M] ShareMind Injection V.2.5
ProductVersion: 2.06
ProductVersionNumber: 2.6.0.0
Subsystem: Windows GUI
SubsystemVersion: 4.0
TimeStamp: 2010:12:10 04:16:39+01:00
UninitializedDataSize: 188416
Symantec reputation:Suspicious.Insight
F-Secure DeepGuard:Suspicious:W32/Malware!Gemini
VT Community
Tidak ada komentar:
Posting Komentar