» itauaplicativo.exe.bak
Overview
Analysis
File Details

itauaplicativo.exe.bak

Projeto1

v2io.xnoiz3 Code Signing

File name:

Publisher:

Microsoft Corporation (signed by v2io.xnoiz3 Code Signing)

Product:

Projeto1

Version:

1.00

MD5:

e0de598c604c740dd77b666c9ccf1afb

SHA-1:

a37c9a0cfe755abc00b70a4b5430a8701bdfcb45

SHA-256:

29890b767f1f99939f1232785eb35488775687d02b1544842187573faf3f06ed

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

11/15/2024 2:57:20 PM UTC (today)

File size:

89.7 KB (91,896 bytes)

Product version:

1.00

Original file name:

Projeto1.exe

Language:

Brazilian Portuguese

Common path:

C:\users\{user}\appdata\local\aplicativo itau\itauaplicativo.exe.bak

Digital Signature

Signed by:

v2io.xnoiz3 Code Signing

Authority:

Valid from:

7/20/2016 12:47:00 AM

Valid to:

7/20/2017 12:47:00 AM

Subject:

CN=v2io.xnoiz3 Code Signing

Issuer:

E=v2io@hotmail.com, CN=v2io.xnoiz3 Root CA, OU=v2io.xnoiz3, O=CE, L=Fortaleza, S=CE, C=BR

Serial number:

File PE Metadata

Compilation timestamp:

7/25/2016 9:47:50 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

1536:3bVN8e6SSMU9NYAhfRhWBsmX+B6WNhHDx+bZhr6verapryR7i0jJM/dATkHBO:JNl6KzsaW8ZhrYe+ly/jQAsBO

Entry address:

0x162970

Entry point:

60, BE, 00, E0, 54, 00, 8D, BE, 00, 30, EB, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, 0B, 75, 28, 8B, 1E, 83, EE, FC, 11, DB, 72, 1F, 48, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, EB, D4, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, EB, 52, 31, C9, 83, E8, 03, 72, 11, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 75, D1, F8, 89... 
[+]

Packer / compiler:

UPX 2.90LZMA

Code size:

84 KB (86,016 bytes)

Scan itauaplicativo.exe.bak - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.