2025-06-19 15:12:38
40a8015eede7d28b15d0a66266499c0d
Name | Virtual Address | Virtual Size | Size of Raw Data | Entropy |
---|---|---|---|---|
.text | 0x00010000 | 0x0023413e | 0x00000000 | 0.0 |
.rdata | 0x00250000 | 0x000abf7a | 0x00000000 | 0.0 |
.data | 0x00300000 | 0x0001a504 | 0x00000000 | 0.0 |
.pdata | 0x00320000 | 0x00015b04 | 0x00000000 | 0.0 |
.GNC | 0x00340000 | 0x00e38ae3 | 0x00000000 | 0.0 |
.0FP | 0x01180000 | 0x00001018 | 0x00001200 | 0.205703156111 |
.!j[ | 0x01190000 | 0x016e7f9c | 0x016e8000 | 7.78995407048 |
.rsrc | 0x02880000 | 0x000001e0 | 0x00000200 | 4.7681311517 |
Name | Offset | Size | Language | Sub-language | File type |
---|---|---|---|---|---|
RT_MANIFEST | 0x02880058 | 0x00000188 | LANG_ENGLISH | SUBLANG_ENGLISH_US | XML 1.0 document, ASCII text, with CRLF line terminators |
Antivirus | Signature |
---|---|
Bkav | W64.AIDetectMalware |
Elastic | malicious (high confidence) |
ClamAV | Clean |
CMC | Clean |
CAT-QuickHeal | Clean |
Cylance | Unsafe |
Zillya | Clean |
Sangfor | Suspicious.Win32.Save.a |
CrowdStrike | win/malicious_confidence_100% (D) |
K7GW | Trojan ( 0059b3891 ) |
K7AntiVirus | Trojan ( 0059b3891 ) |
huorong | Clean |
Baidu | Clean |
VirIT | Clean |
Symantec | ML.Attribute.HighConfidence |
tehtris | Clean |
ESET-NOD32 | a variant of Win32/Packed.VMProtect.ACX |
APEX | Malicious |
Paloalto | generic.ml |
Cynet | Malicious (score: 100) |
Kaspersky | UDS:Trojan.Win64.DBadur.gen |
Alibaba | Clean |
NANO-Antivirus | Clean |
ViRobot | Clean |
MicroWorld-eScan | Clean |
F-Secure | Heuristic.HEUR/AGEN.1379237 |
DrWeb | Clean |
VIPRE | Clean |
McAfeeD | Real Protect-LS!5AC42C541562 |
Trapmine | Clean |
Sophos | Clean |
Ikarus | Trojan.Win32.VMProtect |
Jiangmin | Clean |
Webroot | Clean |
Varist | Clean |
Avira | HEUR/AGEN.1379237 |
Antiy-AVL | RiskWare[Packed]/Win32.VMProtect.a |
Kingsoft | Clean |
Gridinsoft | Trojan.Heur!.02212023 |
Xcitium | Clean |
Microsoft | Trojan:Win32/Sabsik.FL.A!ml |
SUPERAntiSpyware | Clean |
ZoneAlarm | Clean |
Detected | |
AhnLab-V3 | Trojan/Win.Generic.R712046 |
Acronis | Clean |
VBA32 | Clean |
TACHYON | Clean |
Malwarebytes | Malware.AI.3755712024 |
Panda | Clean |
Zoner | Clean |
TrendMicro-HouseCall | Clean |
Tencent | Clean |
Yandex | Clean |
TrellixENS | Artemis!5AC42C541562 |
SentinelOne | Static AI - Malicious PE |
MaxSecure | Trojan.Malware.300983.susgen |
Fortinet | W32/PossibleThreat |
DeepInstinct | Clean |
alibabacloud | VirTool:Win/Packed.VMProtect.AWF |
IRMA | Signature |
---|---|
Trend Micro SProtect (Linux) | Clean |
Avast Core Security (Linux) | Win64:MalwareX-gen [Misc] |
C4S ClamAV (Linux) | Clean |
Trellix (Linux) | Clean |
Sophos Anti-Virus (Linux) | Mal/Generic-S |
Bitdefender Antivirus (Linux) | QD:Trojan.GenericKDQ.1DB86945FF |
G Data Antivirus (Windows) | Virus: QD:Trojan.GenericKDQ.1DB86945FF (Engine A) |
WithSecure (Linux) | Heuristic.HEUR/AGEN.1379237 |
ESET Security (Windows) | a variant of Win32/Packed.VMProtect.ACX trojan |
DrWeb Antivirus (Linux) | Clean |
ClamAV (Linux) | Clean |
eScan Antivirus (Linux) | QD:Trojan.GenericKDQ.1DB86945FF(DB) |
Kaspersky Standard (Windows) | UDS:Trojan.Win64.DBadur.gen |
Emsisoft Commandline Scanner (Windows) | QD:Trojan.GenericKDQ.1DB86945FF (B) |