what you trying to hide..
File hollywolly.exe received on 2009.11.24 00:21:02 (UTC)
Current status: finished
Result: 1/41 (2.44%)
Compact Compact
Print results Print results
Antivirus Version Last Update Result
a-squared 4.5.0.43 2009.11.23 -
AhnLab-V3 5.0.0.2 2009.11.23 -
AntiVir 7.9.1.70 2009.11.23 -
Antiy-AVL 2.0.3.7 2009.11.23 -
Authentium 5.2.0.5 2009.11.23 -
Avast 4.8.1351.0 2009.11.23 -
AVG 8.5.0.425 2009.11.23 -
BitDefender 7.2 2009.11.24 -
CAT-QuickHeal 10.00 2009.11.23 -
ClamAV 0.94.1 2009.11.23 -
Comodo 3013 2009.11.23 -
DrWeb 5.0.0.12182 2009.11.23 -
eSafe 7.0.17.0 2009.11.23 -
eTrust-Vet 35.1.7137 2009.11.23 -
F-Prot 4.5.1.85 2009.11.23 -
F-Secure 9.0.15370.0 2009.11.20 -
Fortinet 3.120.0.0 2009.11.23 -
GData 19 2009.11.24 -
Ikarus T3.1.1.74.0 2009.11.23 -
Jiangmin 11.0.800 2009.11.23 -
K7AntiVirus 7.10.903 2009.11.23 -
Kaspersky 7.0.0.125 2009.11.24 -
McAfee 5811 2009.11.23 -
McAfee+Artemis 5811 2009.11.23 -
McAfee-GW-Edition 6.8.5 2009.11.23 Heuristic.BehavesLike.Win32.Trojan.I
Microsoft 1.5302 2009.11.23 -
NOD32 4631 2009.11.23 -
Norman 6.03.02 2009.11.23 -
nProtect 2009.1.8.0 2009.11.23 -
Panda 10.0.2.2 2009.11.23 -
PCTools 7.0.3.5 2009.11.23 -
Prevx 3.0 2009.11.24 -
Rising 22.23.00.09 2009.11.23 -
Sophos 4.47.0 2009.11.23 -
Sunbelt 3.2.1858.2 2009.11.24 -
Symantec 1.4.4.12 2009.11.24 -
TheHacker 6.5.0.2.076 2009.11.23 -
TrendMicro 9.0.0.1003 2009.11.23 -
VBA32 3.12.12.0 2009.11.22 -
ViRobot 2009.11.23.2049 2009.11.23 -
VirusBuster 5.0.21.0 2009.11.23 -
Additional information
File size: 477522 bytes
MD5 : a3f6afddbee68242e365201b12316d45
SHA1 : 74a2fa4d478cb0e9d36bf6e9db72673e4ef2ea05
SHA256: 9fbfc0bea17c4e13f3a4a507a2bc309e2f7f3083b4a0d35dd0702dbe4f9cfe6c
PEInfo: PE Structure information
( base data )
entrypointaddress.: 0x1220
timedatestamp.....: 0x4ABBB6F5 (Thu Sep 24 20:14:13 2009)
machinetype.......: 0x14C (Intel I386)
( 5 sections )
name viradd virsiz rawdsiz ntrpy md5
.text 0x1000 0x3DB60 0x3DC00 6.09 b87c630aad0bda7e6b58d6cc610624df
.data 0x3F000 0x1A0 0x200 1.33 369e850633c6cb160fb8351575e89503
.rdata 0x40000 0x2730 0x2800 5.13 9a2988746ecedcd6b799da5bd8cbdb1f
.bss 0x43000 0x4BF0 0x0 0.00 d41d8cd98f00b204e9800998ecf8427e
.idata 0x48000 0x850 0xA00 3.81 5e5298f4df0f6f79f91c98ea52868cad
( 3 imports )
> kernel32.dll: AddAtomA, CreateSemaphoreA, ExitProcess, FindAtomA, GetAtomNameA, GetLastError, InterlockedDecrement, InterlockedIncrement, OpenProcess, ReleaseSemaphore, SetLastError, SetUnhandledExceptionFilter, Sleep, TlsAlloc, TlsFree, TlsGetValue, TlsSetValue, WaitForSingleObject, WriteProcessMemory
> msvcrt.dll: __getmainargs, __mb_cur_max, __p__environ, __p__fmode, __set_app_type, _assert, _cexit, _ctype, _errno, _filelengthi64, _fstati64, _iob, _isctype, _lseeki64, _onexit, _pctype, _setmode, _strnicmp, _vsnprintf, abort, atexit, fclose, fflush, fgetpos, fopen, fprintf, fread, free, fsetpos, fwrite, getc, localeconv, malloc, memchr, memcpy, memmove, memset, putc, setlocale, setvbuf, signal, strcmp, strcoll, strcpy, strftime, strlen, strtod, strxfrm, ungetc, _fdopen, _read, _strdup, _write
> user32.dll: FindWindowA, GetWindowThreadProcessId
( 0 exports )
TrID : File type identification
Win32 Executable MS Visual C++ (generic) (62.9%)
Win32 Executable Generic (14.2%)
Win32 Dynamic Link Library (generic) (12.6%)
Win16/32 Executable Delphi generic (3.4%)
Generic Win/DOS Executable (3.3%)
ssdeep: 12288

Ncqs65GOF7tSQUK93dU6Q1lmStkNbWU8xxdWSbVSfcEiP/3IWVB/ux+cm9G

iqs65GOF7TQGStklWnV/K
PEiD : -
RDS : NSRL Reference Data Set
http://www.virustotal.com/analisis/...9e2f7f3083b4a0d35dd0702dbe4f9cfe6c-1259022062