home

asterisco.exe

MD5:
87e2cccdeaf04266227c5f10ea2f3026

SHA-1:
80f6281c4ab786e1b4ee1c1a39359b361fccc533

SHA-256:
bc7c9213e09f7aef2db3304dab8d79e5083acf6d56a16ed2b17abaa60c2b24cc

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/29/2024 1:16:07 AM UTC  (today)

File size:
365.4 KB (374,220 bytes)

File type:
Executable application (Win64 EXE)

Common path:
C:\users\{user}\downloads\asterisco.exe

File PE Metadata
Compilation timestamp:
10/8/2015 10:20:05 AM

OS version:
4.0

OS bitness:
Win64

Subsystem:
Windows Console

Linker version:
2.23

CTPH (ssdeep):
6144:knSmADUHRNdDK1ee2k6Sn4s68dTcEgDAIpiWe97TzGux0siC6pEOEGElVt9BHUW8:USmpJ9tmAFd3F

Entry address:
0x14D0

Entry point:
48, 83, EC, 28, C7, 05, 92, FB, 02, 00, 00, 00, 00, 00, E8, 2D, 99, 00, 00, E8, 98, FC, FF, FF, 90, 90, 48, 83, C4, 28, C3, 90, 55, 48, 89, E5, 48, 83, EC, 40, 89, 4D, 10, 66, C7, 45, F0, 14, 00, 66, C7, 45, F2, 17, 00, B9, F5, FF, FF, FF, 48, 8B, 05, F9, 0E, 03, 00, FF, D0, 8B, 55, F0, 48, 89, C1, 48, 8B, 05, 7A, 0F, 03, 00, FF, D0, 83, 7D, 10, 01, 75, 0C, 48, 8D, 0D, CF, 7A, 02, 00, E8, 72, A9, 00, 00, E8, 75, A9, 00, 00, 66, C7, 45, E0, 14, 00, 66, C7, 45, E2, 17, 00, B9, F5, FF, FF, FF, 48, 8B, 05, B9...
 
[+]

Entropy:
4.7970

Code size:
82.5 KB (84,480 bytes)

The file asterisco.exe has been seen being distributed by the following URL.

https://app.schoology.com/system/files/attachments/files/m/201510/course/.../asterisco_56168a6ae83bc.exe

Scan asterisco.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.