2024-12-08 17:23:22
2eabe9054cad5152567f0699947a2c5b
Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
---|---|---|---|---|
\x00 | 0x00001000 | 0x00052000 | 0x00024200 | 7.97817479577 |
.rsrc | 0x00053000 | 0x000002b0 | 0x00000400 | 5.18683272489 |
.idata | 0x00054000 | 0x00001000 | 0x00000200 | 1.11947181056 |
0x00055000 | 0x002b6000 | 0x00000200 | 0.260771276048 | |
kymuzjnt | 0x0030b000 | 0x001aa000 | 0x001a9200 | 7.95340455353 |
zjyqsyrw | 0x004b5000 | 0x00001000 | 0x00000400 | 5.79244201624 |
.taggant | 0x004b6000 | 0x00003000 | 0x00002200 | 0.789214960398 |
Name | Offset | Size | Language | Sub-language | File type |
---|---|---|---|---|---|
RT_MANIFEST | 0x00053058 | 0x00000256 | LANG_NEUTRAL | SUBLANG_NEUTRAL | ASCII text, with CRLF line terminators |
Antivirus | Signature |
---|---|
Bkav | W32.AIDetectMalware |
Lionic | Clean |
Elastic | malicious (high confidence) |
ClamAV | Clean |
CMC | Clean |
CAT-QuickHeal | Clean |
Skyhigh | BehavesLike.Win32.Generic.tc |
ALYac | Gen:Variant.Symmi.93663 |
Cylance | Unsafe |
Zillya | Clean |
Sangfor | Clean |
CrowdStrike | win/malicious_confidence_90% (D) |
Alibaba | Clean |
K7GW | Clean |
K7AntiVirus | Clean |
huorong | HEUR:TrojanSpy/Stealer.ay |
Baidu | Clean |
VirIT | Clean |
Paloalto | Clean |
Symantec | ML.Attribute.HighConfidence |
tehtris | Generic.Malware |
ESET-NOD32 | a variant of Win32/Packed.Themida.HZB |
APEX | Malicious |
Avast | Win32:Evo-gen [Trj] |
Cynet | Malicious (score: 99) |
Kaspersky | VHO:Trojan-Spy.Win32.Convagent.gen |
BitDefender | Gen:Variant.Symmi.93663 |
NANO-Antivirus | Clean |
ViRobot | Clean |
MicroWorld-eScan | Gen:Variant.Symmi.93663 |
Tencent | Clean |
Sophos | Generic ML PUA (PUA) |
F-Secure | Trojan.TR/Crypt.XPACK.Gen |
DrWeb | Clean |
VIPRE | Gen:Variant.Symmi.93663 |
TrendMicro | Clean |
McAfeeD | Real Protect-LS!4208CB745B34 |
Trapmine | malicious.high.ml.score |
CTX | exe.unknown.symmi |
Emsisoft | Gen:Variant.Symmi.93663 (B) |
Ikarus | Clean |
FireEye | Generic.mg.4208cb745b3416b4 |
Jiangmin | Clean |
Webroot | Clean |
Varist | W32/Themida.CT.gen!Eldorado |
Avira | TR/Crypt.XPACK.Gen |
Fortinet | Clean |
Antiy-AVL | Clean |
Kingsoft | malware.kb.b.989 |
Gridinsoft | Trojan.Heur!.038120A1 |
Xcitium | Clean |
Arcabit | Trojan.Symmi.D16DDF |
SUPERAntiSpyware | Clean |
Microsoft | Trojan:Win32/Wacatac.B!ml |
Detected | |
AhnLab-V3 | Trojan/Win.Generic.R683293 |
Acronis | Clean |
McAfee | Clean |
TACHYON | Clean |
VBA32 | Clean |
Malwarebytes | Trojan.MalPack |
Panda | Clean |
Zoner | Probably Heur.ExeHeaderL |
TrendMicro-HouseCall | Clean |
Rising | Stealer.Agent!1.106CA (CLASSIC) |
Yandex | Clean |
SentinelOne | Static AI - Malicious PE |
MaxSecure | Clean |
GData | Gen:Variant.Symmi.93663 |
AVG | Win32:Evo-gen [Trj] |
DeepInstinct | MALICIOUS |
alibabacloud | Clean |
IRMA | Signature |
---|---|
ESET Security (Windows) | a variant of Win32/Packed.Themida.HZB trojan |
Avast Core Security (Linux) | Win32:Evo-gen [Trj] |
C4S ClamAV (Linux) | Clean |
F-Secure Antivirus (Linux) | Trojan.TR/Crypt.XPACK.Gen [Aquarius] |
Windows Defender (Windows) | Trojan:Win32/LummaStealer.RPAA!MTB |
McAfee CLI scanner (Linux) | Clean |
Forticlient (Linux) | W32/PossibleThreat |
Bitdefender Antivirus (Linux) | Gen:Variant.Symmi.93663 |
G Data Antivirus (Windows) | Virus: Gen:Variant.Symmi.93663 (Engine A) |
Sophos Anti-Virus (Linux) | Mal/Generic-S |
DrWeb Antivirus (Linux) | Trojan.PWS.Lumma.1113 |
Trend Micro SProtect (Linux) | Clean |
ClamAV (Linux) | Clean |
eScan Antivirus (Linux) | Gen:Variant.Symmi.93663(DB) |
Kaspersky Standard (Windows) | Trojan.Win32.Phpw.btqs |
Emsisoft Commandline Scanner (Windows) | Gen:Variant.Symmi.93663 (B) |