home

happy_images_2014_jpg.exe

The executable happy_images_2014_jpg.exe has been detected as malware by 37 anti-virus scanners. The file has been seen being downloaded from silutesnaujienos.lt.
MD5:
6eeeaed6f39a876c6cfbc598054cfd9d

SHA-1:
75913340d52753d1c51882b715620ef10bb6fac2

SHA-256:
19629120a48e4ca2ccb002678025560aed15e154c76fbc33021b2da7cdb3d4a3

Scanner detections:
37 / 68

Status:
Malware

Analysis date:
12/29/2024 9:58:29 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Heur.Zboter.5
194

AegisLab AV Signature
Backdoor.W32.Simda.lXOM
2.1.4+

AhnLab V3 Security
Trojan/Win32.Fareit
2016.06.03

Avira AntiVirus
TR/Dropper.Gen
8.3.3.4

Arcabit
Trojan.Zboter.5
1.0.0.696

avast!
Win32:Inject-BID [Trj]
2014.9-160725

AVG
Inject2
2017.0.2672

Baidu Antivirus
Win32.Trojan.WisdomEyes.151026.9950
4.0.3.16725

Bitdefender
Gen:Heur.Zboter.5
1.0.20.1035

Bkav FE
W32.VistarrdLTAAAAW.Trojan
1.3.0.8042

Comodo Security
TrojWare.Win32.Injector.OWLP
25156

Dr.Web
Trojan.PWS.Stealer.1932
9.0.1.0207

Emsisoft Anti-Malware
Gen:Heur.Zboter
8.16.07.25.11

ESET NOD32
Win32/Injector.BDEI (variant)
10.13588

Fortinet FortiGate
W32/Sharik.SLB!tr
7/25/2016

F-Prot
W32/Trojan2.OEAE
v6.4.7.1.166

F-Secure
Gen:Heur.Zboter.5
11.2016-25-07_2

G Data
Gen:Heur.Zboter
16.7.25

IKARUS anti.virus
Trojan.Injector
t3scan.2.0.9.0

K7 AntiVirus
Trojan
13.227.19787

Kaspersky
HEUR:Trojan.Win32.Generic
14.0.0.-147

Malwarebytes
Trojan.Upatre
v2016.07.25.11

McAfee
Generic-FAUT!6EEEAED6F39A
5600.6328

Microsoft Security Essentials
Trojan:Win32/Bagsu!rfn
1.1.12805.0

MicroWorld eScan
Gen:Heur.Zboter.5
17.0.0.621

NANO AntiVirus
Trojan.Win32.Inject.cxjjsw
1.0.30.8482

Panda Antivirus
Trj/Genetic.gen
16.07.25.11

Qihoo 360 Security
HEUR/Malware.QVM19.Gen
1.0.0.1120

Quick Heal
Trojan.CeeInject.A4
7.16.14.00

Rising Antivirus
Trjoan.Generic-wd53X5pcPcO (Cloud)
23.00.65.16723

Sophos
Troj/Zbot-IGQ
4.98

SUPERAntiSpyware
Trojan.Agent/Gen-Upatre
9000

Trend Micro House Call
TROJ_MALKRYP.SM1
7.2.207

Trend Micro
TROJ_MALKRYP.SM1
10.465.25

Vba32 AntiVirus
Backdoor.Napolar
3.12.26.4

VIPRE Antivirus
Trojan.Win32.Generic
49840

Zillya! Antivirus
Trojan.Inject.Win32.73413
2.0.0.2903

File size:
84 KB (86,016 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\happy_images_2014_jpg.exe

File PE Metadata
Compilation timestamp:
5/1/2014 3:34:28 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:geLlZzHT4udhK4G5zNP9VfAvTd2MkktmlixFIl/It:gW4udM9zV9dE2dAmjS

Entry address:
0x3671

Entry point:
55, 8B, EC, 89, 1D, F0, 60, 40, 00, BB, F2, 60, 40, 00, EB, 45, 90, 8D, 05, 00, 61, 40, 00, D1, E8, F6, DB, 89, 0D, 10, 61, 40, 00, 1B, DB, 83, E3, F2, 81, C3, 10, 01, 00, 00, 66, 89, 1D, 20, 61, 40, 00, 90, D3, 1D, 30, 61, 40, 00, 41, 00, F7, 90, 41, 00, 0D, 40, 61, 40, 00, 90, 41, 00, 3D, 50, 61, 40, 00, 90, B9, 60, 61, 40, 00, 00, FF, B8, 23, 60, 40, 00, 41, 00, D3, 90, 41, 00, D3, B9, FE, FF, FF, FF, B9, 60, 61, 40, 00, 56, 8B, D8, 57, 36, 8B, 78, 08, 90, 90, 40, 40, 6B, C0, 28, 3D, C8, 00, 00, 00, 7E...
 
[+]

Entropy:
6.9536

Developed / compiled with:
Microsoft Visual C++

Code size:
12 KB (12,288 bytes)

The file happy_images_2014_jpg.exe has been seen being distributed by the following URL.

http://silutesnaujienos.lt/?1rqkcwnwo9p8=7ff1d6084e7f4985

Remove happy_images_2014_jpg.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.