home

mqbol.exe

Stub

The executable mqbol.exe has been detected as malware by 27 anti-virus scanners.
Product:
Stub

Version:
1.00

MD5:
84bd9509a4bcade9a66ad47cded911ff

SHA-1:
298c0ce9368de3b851fa73aed0062a0a91452a59

SHA-256:
fbbedba5fe8f044339b75a29aa9cbacc89c9156eeaa5f6d349969ab2c98a519c

Scanner detections:
27 / 68

Status:
Malware

Analysis date:
4/28/2024 10:36:28 PM UTC  (today)

Scan engine
Detection
Engine version

AhnLab V3 Security
Win-Trojan/Xema.variant
5.0.

Avira AntiVirus
TR/Dropper.Gen
7.9.1.53

Emsisoft A-Squared
Trojan.Win32.VB!IK
4.5.0.41

avast!
Win32:Malware-gen
2014.9-170314

AVG
Generic12
2018.0.2439

Bitdefender
Trojan.Generic.2204704
1.0.20.365

Clam AntiVirus
Trojan.VB-5819
0.98/171

Comodo Security
TrojWare.Win32.Trojan.Agent.~SBW
2849

Dr.Web
Trojan.MulDrop.29448
9.0.1.073

ESET NOD32
Win32/AutoRun.Agent.GG
11.4576

Fortinet FortiGate
Possib1ethreat
3/14/2017

F-Prot
W32/Trojan2.GJXV
v6.4.5.1.85

F-Secure
Trojan.Generic.2204704
11.2017-14-03_3

G Data
Trojan.Generic.2204704
17.3.19

IKARUS anti.virus
Trojan.Win32.VB
t3scan.1.1.74.0

K7 AntiVirus
Trojan.Win32.VB.ADKP
13.7.10.889

Kaspersky
Trojan.Win32.VB
14.0.0.-1308

McAfee
Generic VB.b
5600.6095

Microsoft Security Essentials
Worm:Win32/Hamweq.W
1.163.1557.0

Norman
W32/VBTroj.BPFS
11.20170314

Panda Antivirus
W32/Autorun.IOK
17.03.14.03

Prevx
High Risk Rootkit
3.0

Quick Heal
Trojan.VB.idf
3.17.10.00

Sophos
Mal/VB-AO
4.47

Trend Micro
WORM_VB.HBQ
10.465.14

Vba32 AntiVirus
Trojan.Win32.VB.idf
3.12.10.11

ViRobot
Trojan.Win32.VB.290816.C
2009.11.5.2023

File size:
44 KB (45,088 bytes)

Product version:
1.00

Original file name:
Stub.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
12/18/2008 11:25:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

Entry address:
0x10E4

Entry point:
68, 64, 11, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, A8, 93, 95, 98, 0D, DD, 95, 47, 9F, 77, 08, 45, 06, A5, A9, 7A, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, B7, 00, 00, 00, 53, 74, 75, 62, 00, 65, 72, 73, 00, 00, 00, 00, 01, 00, 03, 00, F8, 18, 40, 00, 00, 00, 00, 00, FF, FF, FF, FF, FF, FF, FF, FF, 00, 00, 00, 00, DC, 19, 40, 00, 34, 60, 40, 00, 00, 00, 00, 00, 60, 4B, 60, 07, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 64, 11, 40, 00...
 
[+]

Entropy:
6.0618

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
20 KB (20,480 bytes)

Remove mqbol.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.