home

12crypt.exe

Shakti

The executable 12crypt.exe has been detected as malware by 18 anti-virus scanners.
Product:
Shakti

Version:
1.0.0.0

MD5:
b3f594c0c8c9164137c9a35002914509

SHA-1:
4a366ecd058108a37583dd5b9cae20a2f96bb6f4

SHA-256:
d03e6589b532a6f42aa7fce9ab29084f91dba7b48a4acdb92fc4887ad6289855

Scanner detections:
18 / 68

Status:
Malware

Analysis date:
4/1/2025 8:16:19 PM UTC  (today)

Scan engine
Detection
Engine version

Agnitum Outpost
Trojan.Blocker
7.1.1

Avira AntiVirus
TR/Strictor.28633.5
7.11.81.130

avast!
Win32:Malware-gen
2014.9-170315

AVG
Generic33
2018.0.2438

Bitdefender
Gen:Variant.Strictor.28633
1.0.20.370

Comodo Security
UnclassifiedMalware
16346

Dr.Web
BackDoor.Comet.152
9.0.1.074

Emsisoft Anti-Malware
Gen:Variant.Strictor.28633
8.17.03.15.03

Fortinet FortiGate
W32/Blocker.BEGF!tr
3/15/2017

F-Secure
Gen:Variant.Strictor.28633
11.2017-15-03_4

G Data
Gen:Variant.Strictor.28633
17.3.22

IKARUS anti.virus
Trojan.Win32.Agent
t3scan.2.0.0.0

Kaspersky
Trojan-Ransom.Win32.Blocker
14.0.0.-1313

McAfee
Artemis!B3F594C0C8C9
5600.6094

Microsoft Security Essentials
Trojan:Win32/Comisproc
1.163.1557.0

Panda Antivirus
Trj/CI.A
17.03.15.03

Trend Micro House Call
TROJ_GEN.RCBB1ET13
7.2.74

VIPRE Antivirus
Trojan.Win32.Generic
18250

File size:
189 KB (193,536 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
Shakti.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\appdata\roaming\12crypt.exe

File PE Metadata
Compilation timestamp:
5/10/2013 9:11:54 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

Entry address:
0x146BE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.9397

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
74 KB (75,776 bytes)

Remove 12crypt.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.