2014-07-01 21:02:13
2dd2758f0793bdb29ce229a2432eb81b
| UPX 2.90 [LZMA] -> Markus Oberhumer, Laszlo Molnar & John Reiser |
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| UPX0 | 0x00001000 | 0x00013000 | 0x00000000 | 0.0 |
| UPX1 | 0x00014000 | 0x00015000 | 0x00014800 | 7.71107019502 |
| UPX2 | 0x00029000 | 0x00001000 | 0x00000200 | 2.51482863059 |
| Antivirus | Signature |
|---|---|
| Bkav | W32.AIDetectMalware |
| Lionic | Hacktool.Win32.Snojan.3!c |
| Elastic | malicious (moderate confidence) |
| ClamAV | Win.Malware.Cymt-10023133-0 |
| CMC | Clean |
| CAT-QuickHeal | Trojan.AgentbPMF.S33725804 |
| Skyhigh | BehavesLike.Win32.ToolSnojan.mc |
| ALYac | Trojan.Agent.CYZT |
| Cylance | Unsafe |
| Zillya | Tool.CoreWarrior.Win32.18 |
| Sangfor | Trojan.Win32.Save.a |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Alibaba | Trojan:Win32/CoreWarrior.d9c68176 |
| K7GW | Trojan ( 005464da1 ) |
| K7AntiVirus | Trojan ( 00575d031 ) |
| huorong | HVM:TrojanDownloader/Small.gen!A |
| Baidu | Clean |
| VirIT | Trojan.Win32.AgentT.DYK |
| Paloalto | Clean |
| Symantec | Hacktool.Flooder |
| tehtris | Clean |
| ESET-NOD32 | a variant of Win32/Agent.AAEF |
| APEX | Clean |
| Avast | Win32:TrojanX-gen [Trj] |
| Cynet | Malicious (score: 100) |
| Kaspersky | HEUR:Flooder.Win32.CoreWarrior.a |
| BitDefender | Trojan.Agent.CYZT |
| NANO-Antivirus | Trojan.Win32.Snojan.jqzopm |
| ViRobot | Clean |
| MicroWorld-eScan | Trojan.Agent.CYZT |
| Tencent | Trojan.Win32.Corewarrior.ca |
| Sophos | Troj/Bdoor-BHD |
| F-Secure | Trojan.TR/Crypt.ULPM.Gen2 |
| DrWeb | Tool.Snojan.1 |
| VIPRE | Trojan.Agent.CYZT |
| TrendMicro | Clean |
| McAfeeD | Real Protect-LS!39372C97811E |
| Trapmine | suspicious.low.ml.score |
| CTX | exe.trojan.snojan |
| Emsisoft | Trojan.Agent.CYZT (B) |
| Ikarus | Trojan.Agent |
| FireEye | Generic.mg.39372c97811e265f |
| Jiangmin | Downloader.Snojan.adp |
| Webroot | Clean |
| Varist | W32/Agent.FBOO-5422 |
| Avira | TR/Crypt.ULPM.Gen2 |
| Fortinet | Riskware/Snojan |
| Antiy-AVL | Trojan/Win32.Phonzy |
| Kingsoft | Clean |
| Gridinsoft | Trojan.Win32.Agent.sa |
| Xcitium | TrojWare.Win32.Snojan.B@7h1cjp |
| Arcabit | Trojan.Agent.CYZT |
| SUPERAntiSpyware | Clean |
| Microsoft | Trojan:Win32/CoreWarrior.DA!MTB |
| Detected | |
| AhnLab-V3 | Downloader/Win.Generic.R665906 |
| Acronis | suspicious |
| McAfee | Artemis!39372C97811E |
| TACHYON | Clean |
| VBA32 | Flooder.CoreWarrior |
| Malwarebytes | Malware.AI.1986541864 |
| Panda | Trj/Genetic.gen |
| Zoner | Clean |
| TrendMicro-HouseCall | Clean |
| Rising | Downloader.Snojan!8.ECDD (TFE:5:V47YrAkOYKG) |
| Yandex | Riskware.Flooder!j7BYbbJGLUM |
| SentinelOne | Static AI - Suspicious PE |
| MaxSecure | Trojan.Malware.325666027.susgen |
| GData | Win32.Application.Snojan.A |
| AVG | Win32:TrojanX-gen [Trj] |
| DeepInstinct | MALICIOUS |
| alibabacloud | Trojan[downloader]:Win/Nemucod.2b1a08a0 |
| IRMA | Signature |
|---|---|
| ESET Security (Windows) | a variant of Win32/Agent.AAEF trojan |
| Avast Core Security (Linux) | Win32:TrojanX-gen [Trj] |
| C4S ClamAV (Linux) | YARA.UPX.UNOFFICIAL |
| F-Secure Antivirus (Linux) | Trojan.TR/Crypt.ULPM.Gen2 [Aquarius] |
| McAfee CLI scanner (Linux) | Clean |
| Bitdefender Antivirus (Linux) | Trojan.Agent.CYZT |
| G Data Antivirus (Windows) | Virus: Trojan.Agent.CYZT (Engine A), Win32.Application.Snojan.A (Engine B) |
| Sophos Anti-Virus (Linux) | Troj/Bdoor-BHD |
| DrWeb Antivirus (Linux) | Clean |
| Trend Micro SProtect (Linux) | Clean |
| WithSecure (Linux) | Trojan.TR/Crypt.ULPM.Gen2 |
| ClamAV (Linux) | Win.Malware.Cymt-10023133-0 |
| eScan Antivirus (Linux) | Trojan.Agent.CYZT(DB) |
| Kaspersky Standard (Windows) | HEUR:Flooder.Win32.CoreWarrior.a |
| Emsisoft Commandline Scanner (Windows) | Trojan.Agent.CYZT (B) |