b0a80810c9c00cfa0fe71bea05fd3af051408f7c800aa990293e3a588c5588d3 File Analysis Results

Metadata

File name:	N/A
File type:	PE32 executable (GUI) Intel 80386, for MS Windows
File size:	195584
Analysis date:	N/A
MD5:	cc7d6afadb486754e5346f1e686998fa
SHA1:	d24a476691e8642f6669dfdf0040f95bb8f2141c
SHA256:	b0a80810c9c00cfa0fe71bea05fd3af051408f7c800aa990293e3a588c5588d3
SHA512:	N/A
SSDEEP:	N/A
IMPHASH:	N/A
Authentihash:	N/A
Related resources

PE Type	PE32
Internal Name	YandexDiskStarter
File Size	191 kB
Machine Type	Intel 386 or later, and compatibles
File OS	Win32
Code Size	62464
OS Version	5.0
Entry Point	0x9af3
File Flags Mask	0x003f
Linker Version	9.0
File Subtype	N/A
Uninitialized Data Size	N/A
File Version	1.2.3.4532
Initialized Data Size	132096
File Description	YandexDiskStarter
Product Version Number	1.2.3.4532
Product Name	Yandex.Disk
Company Name	Yandex
MIME Type	application/octet-stream
Character Set	Unicode
Language Code	English (U.S.)
File Version Number	1.2.3.4532
File Type	Win32 EXE
Original Filename	YandexDiskStarter.exe
Legal Copyright	© 2012-2014 YANDEX
Subsystem	Windows GUI
Object File Type	Executable application
Image Version	0.0
File Flags	(none)
Subsystem Version	5.0
Product Version	1.2.3.4532
Source:

APTNotes
Cyber threat intelligence reports associated with b0a80810c9c00cfa0fe71bea05fd3af051408f7c800aa990293e3a588c5588d3.

Domains
Domains the malware sample communicates with.

Hosts
Hosts the malware sample communicates with.

HTTP Requests
HTTP requests the malware sample makes.

AV Detections
AV detection names associated with the malware sample.

AhnLab-V3	Dropper/Win32.Necurs
Bkav	HW32.Laneul.qgwe
ESET-NOD32	a variant of Win32/Injector.BGNW
TrendMicro-HouseCall	Suspicious_GEN.F47V0625

Mutants
Mutants created by the malware sample.

Registry keys
Registry keys created by the malware sample.

Comments
User comments about b0a80810c9c00cfa0fe71bea05fd3af051408f7c800aa990293e3a588c5588d3.

File: b0a80810c9c00cfa0fe71bea05fd3af051408f7c800aa990293e3a588c5588d3