home

e5dc8536768ece661c981d20c04f6450.pe

House

The file e5dc8536768ece661c981d20c04f6450.pe has been detected as malware by 40 anti-virus scanners.
Publisher:
House

Description:
Depo

Version:
5, 2, 9, 1

MD5:
e5dc8536768ece661c981d20c04f6450

SHA-1:
dd71c44330e2ffd58122368cb82e757ac38cf560

SHA-256:
89a5e53a630051029672cf20c3a2c68cdc79a1616158c3ca7ebd48c084cb98f4

Scanner detections:
40 / 68

Status:
Malware

Analysis date:
4/18/2024 3:31:23 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Injector.AQL
658

Agnitum Outpost
Trojan.Injector
7.1.1

AhnLab V3 Security
Trojan/Win32.Androm
2015.04.06

Avira AntiVirus
TR/Graftor.103344.1
3.6.1.96

avast!
Win32:Injector-BGE [Trj]
2014.9-150418

AVG
Inject
2016.0.3136

Baidu Antivirus
Trojan.Win32.Agent
4.0.3.15418

Bitdefender
Trojan.Injector.AQL
1.0.20.540

Bkav FE
W32.Zuseno.Trojan
1.3.0.4959

Comodo Security
TrojWare.Win32.Injector.AJPG
21663

Dr.Web
BackDoor.Andromeda.178
9.0.1.0108

Emsisoft Anti-Malware
Trojan.Injector.AQL
8.15.04.18.09

ESET NOD32
Win32/TrojanDownloader.Wauchos
9.11430

Fortinet FortiGate
W32/Injector.AKSZ!tr
4/18/2015

F-Prot
W32/Andromeda.G.gen
v6.4.7.1.166

F-Secure
Trojan-Downloader:W32/Wauchos.F
11.2015-18-04_7

G Data
Trojan.Injector.AQL
15.4.25

herdProtect (fuzzy)
variant of ccwraee.bat
2015.7.19.21

IKARUS anti.virus
Virus.Win32.Dropper
t3scan.1.8.9.0

K7 AntiVirus
Riskware
13.176.11711

Kaspersky
Trojan.Win32.Inject
14.0.0.2173

Malwarebytes
Trojan.Injector.HO
v2015.04.18.09

McAfee
W32/Worm-FKU!D29B760709E8
5600.6792

Microsoft Security Essentials
Worm:Win32/Gamarue.F
1.1.11502.0

MicroWorld eScan
Trojan.Injector.AQL
16.0.0.324

NANO AntiVirus
Trojan.Win32.Andromeda.chwrbs
0.30.8.659

Norman
Gamarue.AZU
11.20150418

Panda Antivirus
Generic Malware
15.04.18.09

Qihoo 360 Security
HEUR/QVM07.1.Malware.Gen
1.0.0.1015

Quick Heal
Worm.Gamarue.B
4.15.12.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.18.4

Rising Antivirus
PE:Trojan.Win32.Fednu.upj!1075354232
23.00.65.15416

Sophos
W32/Gamarue-BK
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Injector
9928

Total Defense
Win32/Gamarue.IF
37.0.11533

Trend Micro House Call
Suspicious_GEN.F47V0331
7.2.108

Trend Micro
WORM_GAMARUE.SMV
10.465.18

Vba32 AntiVirus
BScope.Malware-Cryptor.Balbatun.1713
3.12.26.3

VIPRE Antivirus
Trojan-Downloader.Win32.Wauchos.la
39098

Zillya! Antivirus
Trojan.Injector.Win32.202362
2.0.0.2128

File size:
123 KB (125,963 bytes)

Product version:
2, 5, 3, 2

Language:
English (United States)

Common path:
C:\users\{user}\downloads\e5dc8536768ece661c981d20c04f6450.pe

File PE Metadata
Compilation timestamp:
7/15/2013 7:07:16 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:l6u6YB56XJ6owvzbNfURp4VntUhtH7Vi4BhYH:l6uB28owvlrVnihVVi4HG

Entry address:
0x3C61

Entry point:
55, 8B, EC, 6A, FF, 68, A8, 80, 40, 00, 68, 90, 4A, 40, 00, 64, A1, 00, 00, 00, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 58, 53, 56, 57, 89, 65, E8, FF, 15, 20, 80, 40, 00, 33, D2, 8A, D4, 89, 15, AC, 20, 4A, 00, 8B, C8, 81, E1, FF, 00, 00, 00, 89, 0D, A8, 20, 4A, 00, C1, E1, 08, 03, CA, 89, 0D, A4, 20, 4A, 00, C1, E8, 10, A3, A0, 20, 4A, 00, 33, F6, 56, E8, 7A, 0C, 00, 00, 59, 85, C0, 75, 08, 6A, 1C, E8, B0, 00, 00, 00, 59, 89, 75, FC, E8, 45, 09, 00, 00, FF, 15, 1C, 80, 40, 00, A3, B8, 25, 4A, 00, E8...
 
[+]

Entropy:
5.8260

Developed / compiled with:
Microsoft Visual C++ v6.0

Code size:
24.5 KB (25,088 bytes)

Remove e5dc8536768ece661c981d20c04f6450.pe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.