home

huawei_e1550_all_bandactivator_and_unlocker_v2.0.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from 4pda.ru.
MD5:
59782601d71fdaec73d8ac8f2edd3d07

SHA-1:
b942d6eb9f0474dfbf517ca33aa070cc410238f0

SHA-256:
939f1d2f67ab9d677a798db3de8727c5e5e23f7ebd50eff28580fac964a47318

Scanner detections:
6 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 1:26:57 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
HW32.Packed
1.3.0.7400

McAfee
Artemis!59782601D71F
5600.6344

Quick Heal
(Suspicious) - DNAScan
7.16.14.00

Rising Antivirus
Trjoan.Generic-3zXAzXIs7vL (Cloud)
23.00.65.16707

Trend Micro
TROJ_GEN.R047C0OLN15
10.465.09

VIPRE Antivirus
Trojan.Win32.Generic
49108

File size:
868 KB (888,832 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\huawei_e1550_all_bandactivator_and_unlocker_v2.0.exe

File PE Metadata
Compilation timestamp:
10/2/2009 3:20:04 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:d8AuDXwWIZlHXPDtexPSEBss34h6/qGsn:2AuDXGrteNSESs4YiGsn

Entry address:
0x214853

Entry point:
E8, 3B, FF, FF, FF, 05, 98, 44, 00, 00, FF, E0, E8, 2F, FF, FF, FF, 05, 5E, B3, 00, 00, FF, E0, E8, 04, 00, 00, 00, FF, FF, FF, FF, 5E, C3, 00, 31, B8, 26, 0F, BA, 91, 7F, 2E, 4D, 55, 08, 93, 2A, 20, 28, 2C, DB, 42, 0C, 48, 10, 47, 7B, 4C, 7A, 8D, 9B, C3, 84, 64, 27, 7B, 7F, 42, 73, 42, DF, 2E, 5C, FE, 78, B9, 6D, 7B, 51, 01, 62, EE, 1C, E6, 51, 23, B3, A9, 10, D6, CB, C3, 61, 1F, 4F, 49, 7B, 19, 0B, 7B, A5, 7F, 44, 4E, 3D, 3A, E6, 2D, 18, CA, AE, 96, 72, B0, 74, CE, 35, 81, 51, EB, DA, 3E, 6B, 55, 26, 0E...
 
[+]

Code size:
674.5 KB (690,688 bytes)

The file huawei_e1550_all_bandactivator_and_unlocker_v2.0.exe has been seen being distributed by the following URL.

http://4pda.ru/.../index.php?act=attach&id=1136150&dlsess=317a8d2d8e7a0b70fc2faa9775029a10

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.