home

eefbd44a86f2631437fa9a6cb097f3f0.pe

The file eefbd44a86f2631437fa9a6cb097f3f0.pe has been detected as malware by 39 anti-virus scanners.
MD5:
eefbd44a86f2631437fa9a6cb097f3f0

SHA-1:
f50d06d963c424e213ea023061ea500620b00672

SHA-256:
040cc1615fd838383b4b63dae59498ce14115a624adc40eeebcfeca987ec92af

Scanner detections:
39 / 68

Status:
Malware

Analysis date:
4/19/2024 1:20:14 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Win32.VJadtre.3
658

Agnitum Outpost
Win32.Otwycal.Gen.2
7.1.1

AhnLab V3 Security
Win32/Wampori
2015.04.09

avast!
GenMalicious-DDI [Trj]
2014.9-150418

AVG
Win32/Wapomi
2016.0.3136

Baidu Antivirus
Virus.Win32.Otwycal.$a
4.0.3.15418

Bitdefender
Win32.VJadtre.3
1.0.20.540

Bkav FE
W32.HfsAutoB
1.3.0.6379

Comodo Security
Virus.Win32.Wapomi.AA
21697

Dr.Web
Win32.HLLP.Protil.1
9.0.1.0108

Emsisoft Anti-Malware
Win32.VJadtre
8.15.04.18.09

ESET NOD32
Win32/Wapomi.AA virus
9.7.0.302.0

Fortinet FortiGate
W32/Agent.R!tr
4/18/2015

F-Prot
W32/Injector.A.gen
v6.4.6.5.141

F-Secure
Win32.VJadtre.3
11.2015-18-04_7

G Data
Win32.VJadtre
15.4.25

herdProtect (fuzzy)
variant of virussign.com_c632d73a75f9df3f4b11bef9f4e968c0.vir
2015.7.19.21

IKARUS anti.virus
Exploit.Win32.ShellCode
t3scan.1.8.9.0

K7 AntiVirus
Virus
13.202.15530

Kaspersky
Virus.Win32.Otwycal
14.0.0.2173

Malwarebytes
Virus.Wapomi
v2015.04.18.09

McAfee
W32/Simfect
5600.6792

Microsoft Security Essentials
Threat.Undefined
1.195.3480.0

MicroWorld eScan
Win32.VJadtre.3
16.0.0.324

NANO AntiVirus
Virus.Win32.Otwycal.dszex
0.30.10.952

Norman
Win32.VJadtre.3
11.20150418

nProtect
Trojan/W32.Agent.456704.AN
15.04.07.01

Panda Antivirus
Generic Suspicious
15.04.18.09

Qihoo 360 Security
Malware.Radar02.Gen
1.0.0.1015

Quick Heal
W32.Otwyacal.C
4.15.14.00

Reason Heuristics
Threat.Win.Reputation.IMP
15.4.18.5

Sophos
W32/Patched-AG
4.98

Total Defense
Win32/Wapomi.CD
37.0.11539

Trend Micro House Call
PE_WAPOMI.SM
7.2.108

Trend Micro
PE_WAPOMI.SM
10.465.18

Vba32 AntiVirus
Virus.Win32.Lazyman
3.12.26.3

VIPRE Antivirus
Threat.4788102
38882

ViRobot
Win32.Otwycal.A[h]
2014.3.20.0

Zillya! Antivirus
Virus.Otwycal.Win32.1
2.0.0.2132

File size:
446 KB (456,704 bytes)

Common path:
C:\users\{user}\downloads\eefbd44a86f2631437fa9a6cb097f3f0.pe

File PE Metadata
Compilation timestamp:
3/22/2011 7:03:15 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
12288:JQj3kSwNxRhTKj6OA7yQj3kSwNxRhTKj6OA7:J7NxujDAW7NxujDA

Entry address:
0x48000

Entry point:
55, 8B, EC, 81, EC, 88, 00, 00, 00, 83, 65, EC, 00, 83, 65, B0, 00, 83, 65, E0, 00, 83, 65, F0, 00, 83, 65, FC, 00, C7, 45, C4, 43, 3A, 5C, 36, C7, 45, C8, 39, 63, 63, 33, C7, 45, CC, 30, 34, 62, 2E, C7, 45, D0, 65, 78, 65, 00, E8, 00, 00, 00, 00, 58, 05, 9B, 02, 00, 00, 89, 45, E8, 64, A1, 30, 00, 00, 00, 89, 45, D8, 8B, 45, E8, C7, 00, 83, C4, 04, E9, 8B, 45, D8, 8B, 40, 0C, 8B, 40, 1C, 8B, 00, 89, 45, E4, 8B, 45, E4, 8B, 40, 08, 89, 45, F4, 8B, 45, F4, 8B, 40, 3C, 8B, 4D, F4, 8B, 55, F4, 03, 54, 01, 78...
 
[+]

Entropy:
7.9694

Developed / compiled with:
Microsoft Visual C++

Code size:
488 KB (499,712 bytes)

Remove eefbd44a86f2631437fa9a6cb097f3f0.pe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.