2012-12-26 15:55:05
5b4e734e734027217722fe4eb0093f3d
| Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
|---|---|---|---|---|
| .MPRESS1 | 0x00001000 | 0x00017000 | 0x00007a00 | 7.99204052483 |
| .MPRESS2 | 0x00018000 | 0x00000c6e | 0x00000e00 | 5.61324899616 |
| .rsrc | 0x00019000 | 0x00000090 | 0x00000200 | 0.658100252318 |
| Name | Offset | Size | Language | Sub-language | File type |
|---|---|---|---|---|---|
| DAT | 0x00015490 | 0x00001600 | LANG_CHINESE | SUBLANG_CHINESE_SIMPLIFIED | empty |
| DAT | 0x00015490 | 0x00001600 | LANG_CHINESE | SUBLANG_CHINESE_SIMPLIFIED | empty |
| IRMA | Signature |
|---|---|
| Trend Micro SProtect (Linux) | Clean |
| Avast Core Security (Linux) | Win32:Trojan-gen |
| C4S ClamAV (Linux) | Win.Malware.Scar-6745903-0 |
| Trellix (Linux) | Trojan-FRKD |
| Sophos Anti-Virus (Linux) | Troj/Kelihos-BS |
| Bitdefender Antivirus (Linux) | Gen:Trojan.Heur.GM.01C0010402 |
| G Data Antivirus (Windows) | Virus: Gen:Trojan.Heur.GM.01C0010402 (Engine A) |
| WithSecure (Linux) | Trojan.TR/Dropper.Gen |
| ESET Security (Windows) | a variant of Win32/Shyape.G trojan |
| DrWeb Antivirus (Linux) | Trojan.DownLoad3.19306 |
| ClamAV (Linux) | Win.Malware.Scar-6745903-0 |
| eScan Antivirus (Linux) | Gen:Trojan.Heur.GM.01C0010402(DB) |
| Kaspersky Standard (Windows) | Trojan.Win32.Scar.okdf |
| Emsisoft Commandline Scanner (Windows) | Gen:Trojan.Heur.GM.01C0010402 (B) |