home

Anonymous DoSer.exe

The executable Anonymous DoSer.exe has been detected as malware by 28 anti-virus scanners.
Version:
0.0.0.0

MD5:
0a820b141fdb439db9b8de482e231fc5

SHA-1:
d8e91f5c2942c978c7bab3bc7154f1773f8f800a

SHA-256:
effbbf0dcc72bc203d842e3a08e67364876bf4fee0c60dbb2fe803519f7dc5f0

Scanner detections:
28 / 68

Status:
Malware

Analysis date:
5/7/2024 8:32:19 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.MSILKrypt.11
523

Avira AntiVirus
TR/Agent.44544218
8.3.1.6

Arcabit
Trojan.MSILKrypt.11
1.0.0.425

avast!
Win32:Agent-AWWE [Trj]
2014.9-150830

AVG
Dropper.Generic
2016.0.3001

Baidu Antivirus
Trojan.MSIL.Bladabindi
4.0.3.15830

Bitdefender
Gen:Variant.MSILKrypt.11
1.0.20.1210

Clam AntiVirus
Win.Worm.Njrat
0.98/21511

Comodo Security
TrojWare.MSIL.Disfa.A
22455

Dr.Web
Trojan.PWS.Siggen.27583
9.0.1.0242

Emsisoft Anti-Malware
Gen:Variant.MSILKrypt.11
8.15.08.30.09

ESET NOD32
MSIL/TrojanDropper.Agent.AST (variant)
9.11786

Fortinet FortiGate
MSIL/Dropper.JV!tr
8/30/2015

F-Prot
W32/MSIL-Habbo.A!Generic
v6.4.7.1.166

F-Secure
Gen:Variant.MSILKrypt.11
11.2015-30-08_1

G Data
Gen:Variant.MSILKrypt.11
15.8.25

IKARUS anti.virus
Virus.Win32.Prorat
t3scan.1.9.5.0

K7 AntiVirus
Trojan
13.205.16237

Kaspersky
Trojan.MSIL.Disfa
14.0.0.1501

Malwarebytes
Backdoor.IRCBot.OLGen
v2015.08.30.09

Microsoft Security Essentials
TrojanDropper:MSIL/Habbo.A
1.1.11701.0

MicroWorld eScan
Gen:Variant.MSILKrypt.11
16.0.0.726

NANO AntiVirus
Trojan.Win32.Zapchast.dcmmdd
0.30.24.2086

Quick Heal
Backdoor.Bladabindi.A3
8.15.14.00

Rising Antivirus
PE:Backdoor.Bot!1.6675
23.00.65.15828

Total Defense
Win32/MultiDropper.QQ
37.1.62.1

Vba32 AntiVirus
Trojan.MSIL.Disfa
3.12.26.4

VIPRE Antivirus
Trojan-Dropper.Win32.Habbo.a
41144

File size:
660 KB (675,840 bytes)

Product version:
0.0.0.0

Original file name:
Anonymous DoSer.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
3/24/2015 12:30:31 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
12288:kxu7Spt6JMt1HOuS3lPvTX8u/CdrnW952xSHriovgvgYVK8h/quFt:Eu7S/6q/HOjPrN8nWnwSngvUEB

Entry address:
0xA3B3E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
648 KB (663,552 bytes)

Remove Anonymous DoSer.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.