home

안산시청.EXE

SkinMDISample

Codejock Software

Publisher:
Codejock Software

Product:
SkinMDISample

Version:
12.01.0001

MD5:
e0deabf59f137f63eafbb9a4e77ff7e9

SHA-1:
53a19e09d880c043b93b0cfc2cb665d2754e0be3

SHA-256:
a7f470af672a342d28c2c45232308f6ca153be8541e4f4aaf596c1b8ab005e21

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:08:57 AM UTC  (today)

File size:
5.8 MB (6,094,848 bytes)

Product version:
12.01.0001

Original file name:
안산시청.EXE

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\안산시청.exe

File PE Metadata
Compilation timestamp:
12/1/2014 3:05:08 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
98304:kMhJx0C/55dlOA+ZttRj4Yw6Ns4dIxMJI0ps0GHw:xP55dlOA+ZttRj4Yw6Ns4dIxMJI0ps0f

Entry address:
0x4E64

Entry point:
68, 38, 50, 40, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, 39, B0, 6B, 67, 18, 01, 06, 4F, 89, D9, 8D, 89, 3F, 4A, DC, 10, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 53, 6B, 69, 6E, 4D, 44, 49, 53, 61, 6D, 70, 6C, 65, 00, 00, 00, 00, 00, 00, 00, 07, 00, 00, 00, C8, 3F, 44, 00, 06, 00, 00, 00, 68, FF, 43, 00, 07, 00, 00, 00, 6C, FD, 43, 00, 06, 00, 00, 00, 20, FB, 43, 00, 06, 00, 00, 00, 58, C9, 43, 00, 07, 00, 00, 00, 34, C6, 43, 00...
 
[+]

Entropy:
4.5546

Developed / compiled with:
Microsoft Visual Basic v5.0

Code size:
5.8 MB (6,074,368 bytes)

The file 안산시청.EXE has been seen being distributed by the following URL.

http://wwl1581.daum.net/Mail-bin/view_submsg3.cgi?TM=jOi5o GuQw2PQfx3GhmtosVPAvd sUz9PWcSf4t vz/2DiF/toqITFbm1DZg7/vXswIjE0Tzq13B2rCqUJmCMZHSpWMvNvWw3dOg9yspGYeMP4utw151l5z6PekFDT5iQsrkilFUFH6Vi3kLJZC44Tm307BWdy0QFKUdh1Uh 1ylwI/o FmaJtSn7HRYz37ilF09YuZK0zSZxVnlvtL vIk3t0u4pXqvKSQmrtG 3k682ioenSessOhmG6jYOe0kMApOW HODZERLwqmVEMj94lG/hTur5R3GDtwZMwEADftDy0zln/3ReOCXnn1iO8zOWB TjpBXM/QV7eJxcY iQTRYel86VkskgIhxTa3yiGp3dTwgZYpCJE7zLdyQ1WLcVfehajrSp988Qy QWJKZekz/gaoE2huwCT/aiZj3Llw7JK2q7gOpEbDvkQtIUs6TNnPasx47HGKLnQB78GGZXsT62VBSl1hgNckZoD5eZgALWPNCNZcybinhtcFJkTlMbdFwNBvQ/oeF0fHQittrm6mVIP33ONPcHVNUieW6R9TJTmPSHricP5 Wecr7r9Z swNHYiqT31aGSOCndiegpocO/jbWU43/nrXp0 Igu1VwPyeTl3dwT6m2/q8sSJFp8garmcLBbB1lJRKpx0Zn3C5ntZ s0l2/.../x-msdownload&attnum=1&attid=0.1

Scan 안산시청.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.