Analyzing...

File Name: MsWebPlugin.exe

SHA1: bd448850959c1dab7ec93ba33dee8eac2b7d2e7f

MD5: 722808a3c50e2410196dea59e52ed114

First Seen Date: 2015-09-28 13:14:24.514000 ( 2015-09-28 13:14:24.514000 )

Number of Clients Seen: 1

Last Analysis Date: 2015-09-29 00:46:11.145000 ( 2015-09-29 00:46:11.145000 )

Human Expert Analysis Result: No human expert analysis verdict given to this sample yet.

Analysis Summary

Analysis Type	Date	Verdict
Signature Based Detection	2015-09-29 00:46:11.145000	Malware
Static Analysis Overall Verdict	2015-09-29 00:46:11.145000	Highly Suspicious
Dynamic Analysis Overall Verdict	2015-09-29 00:46:11.145000	No Match

Static Analysis

Static Analysis Overall Verdict	Result
Highly Suspicious

Detector	Result
Optional Header LoaderFlags field is valued illegal	Clean
Non-ascii or empty section names detected	Clean
Illegal size of optional Header	Clean
Packer detection on signature database	Unknown
Based on the sections entropy check! file is possibly packed	Suspicious
Timestamp value suspicious	Clean
Header Checksum is zero!	Clean
Enrty point is outside the 1st(.code) section! Binary is possibly packed	Clean
Optional Header NumberOfRvaAndSizes field is valued illegal	Clean
Anti-vm present	Clean
The Size Of Raw data is valued illegal! Binary might crash your disassembler/debugger	Clean
TLS callback functions array detected	Clean

Anti-debug calls

UnhandledExceptionFilter

TerminateProcess

OutputDebugStringA

Dynamic Analysis

Dynamic Analysis Overall Verdict	Result
No Threat Found

Suspicious Behaviors
Undetected

Behavioral Information is not Available

Precise Detectors Analysis Results

No Detector Result Received

Advance Heuristics

No Advanced Heuristic Analysis Result Received

Additional File Information

Vendor Validation

Certificate Validation

PE Headers

Property	Value

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	MD5

PE Imports

PE Exports

PE Resources

Loading...