home

x640001.exe

MD5:
15f479a0ce8f2e9be93d777e7273f3c1

SHA-1:
409f9d8318970970889da4449ffffa9f9cc6b7aa

SHA-256:
73f294deed1e1854dc85bd4842be34fb4263acf1dd8c86533f5c8700db078a1b

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/17/2025 12:00:59 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
TR/Crypt.EPACK.Gen2
7.11.30.172

Bkav FE
W32.SympaiY.Trojan
1.3.0.6379

Malwarebytes
Trojan.Inject
v2015.05.30.06

Norman
Gen:Variant.Kazy.623962
03.12.2014 13:20:04

Rising Antivirus
PE:Malware.Obscure!1.9C59
23.00.65.15528

File size:
1.5 MB (1,584,682 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\2samples\x640001.exe

File PE Metadata
Compilation timestamp:
5/8/2015 12:12:51 PM

OS version:
13.9

OS bitness:
Win64

Subsystem:
Windows GUI

Linker version:
1.1

CTPH (ssdeep):
49152:LgL3JpQ4DhaRFhu+ZXxAOJWM0LPM4rdf6:E3JpQcoR1xAskM416

Entry address:
0x5D76

Entry point:
4D, 5A, 90, 00, 03, 00, 00, 00, 04, 00, 00, 00, FF, FF, 00, 00, B8, 00, 00, 00, 00, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, E8, 00, 00, 00, 0E, 1F, BA, 0E, 00, B4, 09, CD, 21, B8, 01, 4C, CD, 21, 54, 68, 69, 73, 20, 70, 72, 6F, 67, 72, 61, 6D, 20, 63, 61, 6E, 6E, 6F, 74, 20, 62, 65, 20, 72, 75, 6E, 20, 69, 6E, 20, 44, 4F, 53, 20, 6D, 6F, 64, 65, 2E, 0D, 0D, 0A, 24, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.9777  (probably packed)

Code size:
24 KB (24,577 bytes)

Scan x640001.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.