home

매시매1.6(xp+ver).exe

Version:
1.1.13.00

MD5:
e6865a6eeac8076f350a742b27f457da

SHA-1:
09809c828e1feb38c15db29776afd99908022006

SHA-256:
b783e6edce3ad35aea9c589e41d2a1c864b51d728bd69e3a50698902fcad5c72

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 11:38:20 AM UTC  (today)

File size:
2.8 MB (2,904,576 bytes)

Product version:
1.1.13.00

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\매시매1.6(xp+ver).exe

File PE Metadata
Compilation timestamp:
8/27/2013 7:11:10 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
24576:3NkYJVnDA4mqBb82j8xHEITi0VOLM3E+aAy9jZpg9V0+Wk:FZVoi7LM9y9lpOFWk

Entry address:
0x8DBD3

Entry point:
E8, E0, 5D, 00, 00, E9, 89, FE, FF, FF, CC, CC, CC, 56, 8B, 44, 24, 14, 0B, C0, 75, 28, 8B, 4C, 24, 10, 8B, 44, 24, 0C, 33, D2, F7, F1, 8B, D8, 8B, 44, 24, 08, F7, F1, 8B, F0, 8B, C3, F7, 64, 24, 10, 8B, C8, 8B, C6, F7, 64, 24, 10, 03, D1, EB, 47, 8B, C8, 8B, 5C, 24, 10, 8B, 54, 24, 0C, 8B, 44, 24, 08, D1, E9, D1, DB, D1, EA, D1, D8, 0B, C9, 75, F4, F7, F3, 8B, F0, F7, 64, 24, 14, 8B, C8, 8B, 44, 24, 10, F7, E6, 03, D1, 72, 0E, 3B, 54, 24, 0C, 77, 08, 72, 0F, 3B, 44, 24, 08, 76, 09, 4E, 2B, 44, 24, 10, 1B...
 
[+]

Entropy:
4.9803

Code size:
618 KB (632,832 bytes)

The file 매시매1.6(xp+ver).exe has been seen being distributed by the following URL.

http://wwl1544.daum.net/Mail-bin/view_submsg3.cgi?TM=jOi5o GuQw0ZM1C zz8qvgz3ZqIJ/5PitfrYhdrEJ9L5TyVAS4ihBFmLhWRc0muAL 7MN3t0Z4x7XolbUG1CfoPl6u1azq6ZLC6ISNIRqcPLgwlomcEk5RwNmhezLNL Q6EOQYaQodlXj3UJn/1RhbBX9ZiOQVIJaVhKfmtvOXtPu66vcahjaMOL22Oug2UecXmaTGkXoYXmG4S7BDOI8vuH TKaLxFTjLQ93Z zmBMrvcdXHXiZe9PciWrT0TwyagmhKCVcOF61HKxCKTttE8g7i0GT2w Ja7jHvCFTVPSS4vzZ6mHpJcGe/bDJn8UmKiee/jVTrFn PJ/3nQyKjtbfIpAPKgJXlCqRzrOff6KMFJqj50m86dGR3jKhGJuU3XhSQWs bbdABZrjZ1HbsNowTEVSWXPFI5RP40H3Pt1H5g1h8vUfLXapMgibVQeVNEKdHbE0llnG182mg2B1lAIpLyq6MS6CvGuc3 I4DMn Ephl84pRRrcTrLl1AYSllKioVSm/5jrG8hEczKWPoKia29eRFfeUOoP2hmSD2Jp8Q3RMtDgZ83RKucZekrtuzt9p1sHUhKwAah7m2PHX5tE5lssstpUrsSSvkY4lAWUrLn5AYx/ BNL 2/.../x-msdownload&attnum=1&attid=0.1

Scan 매시매1.6(xp+ver).exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.