dnstun.exe

Scan dnstun.exe - Powered by Reason Core Security
MD5:
f4f9a7aa8a8dc2dd4190d116840c2293

SHA-1:
f794f70eaadd4ad53ca11c64123e2da84a58ffb7

SHA-256:
4703f6d3c4390e181a6a2b23d8ff28551d1088c43cbd81ef9ffe3869703c33b1

Scanner detections:
6 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/8/2016 7:18:48 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.XPACK.Gen
7.11.89.32

eSafe
Win32.TRCrypt.XPACK
7.0.17.0

IKARUS anti.virus
Trojan.Crypt
t3scan.2.0.3.0

Quick Heal
(Suspicious) - DNAScan
6.14.12.00

Rising Antivirus
Trojan.Win32.Generic.12900D21
23.00.65.14608

Trend Micro House Call
TROJ_GEN.F47V0108
7.2.161

File size:
10 KB (10,240 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
6/13/2006 9:23:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
96:NyzpH64lfFAVkyb+4IIGTQvbYFWWhPjDCIFQjQvQj+QdXtRwSoF07sZfRtRloWmR:4pa48K4IIU9ijQvMtsjSWmKXC/V

Entry address:
0x1270

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, 48, 61, 40, 00, E8, C8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 48, 61, 40, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, 64, 61, 40, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, 54, 61, 40, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 5D, E9, D7, 0F, 00, 00, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 38, 8B, 45, 08, 89, 04, 24, E8, AF, 13, 00...
 
[+]

Packer / compiler:
Dev-C++ 4.9.9.2

Code size:
6 KB (6,144 bytes)

Scan dnstun.exe - Powered by Reason Core Security