ec801a7d4b72a288ec6c207bb9ff0131
This file seems to be a .NET executable.
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Sadly, Manalyzer's analysis techniques were designed for native code, so it's likely that this report won't tell you much.
Sorry!
Summary
| Architecture |
IMAGE_FILE_MACHINE_I386
|
|---|---|
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| Compilation Date | 2017-Dec-10 09:47:39 |
| Comments | |
| CompanyName | master131 |
| FileDescription | Extreme Injector |
| FileVersion | 3.7.3.0 |
| InternalName | Extreme Injector.exe |
| LegalCopyright | Copyright © 2017 |
| LegalTrademarks | master131 |
| OriginalFilename | Extreme Injector.exe |
| ProductName | Extreme Injector |
| ProductVersion | 3.7.3.0 |
| Assembly Version | 3.7.3.0 |
Plugin Output
| Info | Matching compiler(s): |
Microsoft Visual C# v7.0 / Basic .NET
.NET executable -> Microsoft |
| Malicious | VirusTotal score: 53/70 (Scanned on 2022-03-02 00:46:55) |
Lionic:
Trojan.Win32.Generic.llVQ
Elastic: malicious (moderate confidence) MicroWorld-eScan: Application.Hacktool.ZQ FireEye: Generic.mg.ec801a7d4b72a288 CAT-QuickHeal: PUA.GenericFC.S6060072 ALYac: Application.Hacktool.ZQ Cylance: Unsafe Zillya: Trojan.DllInject.Win32.1584 Sangfor: Riskware.MSIL.Injector.ky K7AntiVirus: Unwanted-Program ( 004d38111 ) K7GW: Unwanted-Program ( 004d38111 ) Cybereason: malicious.d4b72a BitDefenderTheta: Gen:NN.ZemsilF.34232.4n0@ayB2dwj Cyren: W32/Trojan.OFOZ-0327 Symantec: ML.Attribute.HighConfidence ESET-NOD32: a variant of MSIL/DllInject.XQ potentially unsafe APEX: Malicious Paloalto: generic.ml Kaspersky: not-a-virus:UDS:RiskTool.MSIL.Injector BitDefender: Application.Hacktool.ZQ NANO-Antivirus: Trojan.Win32.DllInject.fjhtkg SUPERAntiSpyware: Hack.Tool/Gen-Injector Ad-Aware: Application.Hacktool.ZQ Emsisoft: Application.Hacktool.ZQ (B) Comodo: Malware@#khuyon6cxb3x VIPRE: Trojan.Win32.Generic!BT TrendMicro: TROJ_GEN.R002C0DF921 McAfee-GW-Edition: Artemis!Trojan Sophos: Generic PUA DC (PUA) Ikarus: PUA.HackTool GData: Application.Hacktool.ZQ Avira: APPL/Injector.AH Antiy-AVL: Trojan/Generic.ASMalwS.24F7A11 Gridinsoft: Trojan.Win32.Agent.dg Arcabit: Application.Hacktool.ZQ ViRobot: HackTool.Injector.1968128 ZoneAlarm: not-a-virus:UDS:RiskTool.MSIL.Injector Microsoft: Trojan:Win32/CryptInject Cynet: Malicious (score: 99) AhnLab-V3: HackTool/Win32.Injector.C4224306 McAfee: GenericRXAA-AA!EC801A7D4B72 MAX: malware (ai score=100) VBA32: Trojan.Tiggre Malwarebytes: RiskWare.Injector.DC TrendMicro-HouseCall: TROJ_GEN.R002C0DF921 Rising: Trojan.Generic/MSIL@AI.100 (RDM.MSIL:fLDtS9sOsRbTTSTfaUsOhA) Yandex: Trojan.Igent.bTKAcV.64 SentinelOne: Static AI - Malicious PE MaxSecure: Trojan.Malware.300983.susgen Fortinet: W32/DllInject.XQ!tr Webroot: W32.Injector Panda: Trj/CI.A CrowdStrike: win/grayware_confidence_100% (W) |
Hashes
DOS Header
| e_magic | MZ |
|---|---|
| e_cblp | 0x90 |
| e_cp | 0x3 |
| e_crlc | 0 |
| e_cparhdr | 0x4 |
| e_minalloc | 0 |
| e_maxalloc | 0xffff |
| e_ss | 0 |
| e_sp | 0xb8 |
| e_csum | 0 |
| e_ip | 0 |
| e_cs | 0 |
| e_ovno | 0 |
| e_oemid | 0 |
| e_oeminfo | 0 |
| e_lfanew | 0x80 |
PE Header
| Signature | PE |
|---|---|
| Machine |
IMAGE_FILE_MACHINE_I386
|
| NumberofSections | 3 |
| TimeDateStamp | 2017-Dec-10 09:47:39 |
| PointerToSymbolTable | 0 |
| NumberOfSymbols | 0 |
| SizeOfOptionalHeader | 0xe0 |
| Characteristics |
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_EXECUTABLE_IMAGE
|
Image Optional Header
| Magic | PE32 |
|---|---|
| LinkerVersion | 8.0 |
| SizeOfCode | 0x1db800 |
| SizeOfInitializedData | 0x4e00 |
| SizeOfUninitializedData | 0 |
| AddressOfEntryPoint | 0x001DD65E (Section: .text) |
| BaseOfCode | 0x2000 |
| BaseOfData | 0x1de000 |
| ImageBase | 0x400000 |
| SectionAlignment | 0x2000 |
| FileAlignment | 0x200 |
| OperatingSystemVersion | 4.0 |
| ImageVersion | 0.0 |
| SubsystemVersion | 4.0 |
| Win32VersionValue | 0 |
| SizeOfImage | 0x1e6000 |
| SizeOfHeaders | 0x200 |
| Checksum | 0 |
| Subsystem |
IMAGE_SUBSYSTEM_WINDOWS_GUI
|
| DllCharacteristics |
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
|
| SizeofStackReserve | 0x100000 |
| SizeofStackCommit | 0x1000 |
| SizeofHeapReserve | 0x100000 |
| SizeofHeapCommit | 0x1000 |
| LoaderFlags | 0x1bcf3ac9 |
| NumberOfRvaAndSizes | 15 |
.text
.rsrc
.reloc
Imports
| mscoree.dll |
_CorExeMain
|
|---|
Delayed Imports
1
2
3
32512
1 (#2)
1 (#3)
Version Info
| Signature | 0xfeef04bd |
|---|---|
| StructVersion | 0x10000 |
| FileVersion | 3.7.3.0 |
| ProductVersion | 3.7.3.0 |
| FileFlags | (EMPTY) |
| FileOs |
VOS_DOS_WINDOWS32
VOS_NT_WINDOWS32
VOS__WINDOWS32
|
| FileType |
VFT_APP
|
| Language | UNKNOWN |
| Comments | |
| CompanyName | master131 |
| FileDescription | Extreme Injector |
| FileVersion (#2) | 3.7.3.0 |
| InternalName | Extreme Injector.exe |
| LegalCopyright | Copyright © 2017 |
| LegalTrademarks | master131 |
| OriginalFilename | Extreme Injector.exe |
| ProductName | Extreme Injector |
| ProductVersion (#2) | 3.7.3.0 |
| Assembly Version | 3.7.3.0 |
| Resource LangID | UNKNOWN |
|---|