avicodec_1.2_b113.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from lb.cdn.m6web.fr and multiple other hosts.
MD5:
85cb48ae159be89aa4004adb43a627e2

SHA-1:
8dc446c8493b0f115df1a5332c7307d0f05985e9

SHA-256:
b2d503de0fcb1363f7c524c94c05bc291d9155d3c5885b3fbccf2a906e94391b

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 4:35:28 PM UTC  (today)

File size:
557.3 KB (570,702 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
11/13/2005 6:32:25 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
12288:yBdgXDKa3zCE3tO0kAORZG5FHvKUQrJiwSZz0h/j8EI9vQ4:y4DKa3OE3E0kAcEBvFNz0m9L

Entry address:
0x3207

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, F6, 57, 89, 74, 24, 18, BD, E0, 74, 40, 00, 89, 74, 24, 10, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 56, FF, 15, 84, 72, 40, 00, 56, 68, 60, 01, 00, 00, A3, 50, 40, 42, 00, 8D, 44, 24, 38, 50, 56, 68, DC, 74, 40, 00, FF, 15, 6C, 71, 40, 00, 68, D0, 74, 40, 00, 68, A0, 37, 42, 00, E8, 32, 23, 00, 00, BB, 00, B4, 42, 00, 53, BF, 00, 04, 00, 00, 57, FF, 15, B4, 70, 40, 00, E8, 3A, FF, FF, FF, 85, C0, 75, 24, 68, FB, 03, 00, 00, 53, FF, 15, 58, 71, 40, 00, 68, C8, 74...
 
[+]

Entropy:
7.9661

Packer / compiler:
Nullsoft install system v2.x

Code size:
22.5 KB (23,040 bytes)

The file avicodec_1.2_b113.exe has been seen being distributed by the following 25 URLs.

http://lb.cdn.m6web.fr/d/c/a/8565460410b2ae14fc61766f8ed548fc/58848077/soft/.../avicodec_1-2-build-113_fr_11101.exe

http://www.free-codecs.com/download_soft.php?d=ae166112d55ece7483ca47d6276fef5a&s=104&r=&f=avicodec.htm

http://gsf-cf.softonic.com/8dc/446/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35309&instance=softonic_it&type=PROGRAM&Expires=1460789609&Signature=h-QDnJ17sqJTT31G7KI8ryCuMU2lryPoN~NMwMqkbwOS2Tqr3ygoBC9qefTkCDwUl18yHGdjaRpqqXAA3eHo51MdgS159SRKDhLlb~sKSG-IJmuwwt-3owRAGYAdyCAhx9WYQTAfZLN1w0VfEcYrrNP3hFzDzEiq8XBvykM7K2g_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVIcodec_1.2_b113.exe

http://www.videoaudio.pl/.../AVIcodec_1.2_b113_videoaudio.pl_.exe

http://high.software.dn.naver.com/56736a82ccf4d7098f577a14f81bc876/.../AVIcodec_1.2_b113.exe

http://lb.cdn.m6web.fr/d/c/a/87a0adb3d9946d91bb11c4b22e723f1d/57509aad/soft/.../avicodec_1-2-build-113_fr_11101.exe

http://www.free-codecs.com/download_soft.php?d=a97a3a67c92fa61d822d3f8e553eb912&s=104&r=&f=avicodec.htm

http://gsf-cf.softonic.com/8dc/446/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35309&instance=softonic_it&type=PROGRAM&Expires=1476356699&Signature=f~PHV~Aln8XuNJoH3hJZkIY55jRHe9tgyoDMj4vTLu5kcbfa~J-RilJYI3DwAkJxXS6nnVLzQrcyKxZ3x9lDPxU0w2gXnGljqA6R~mKxzAnKfaWd9hnkCuMBxvkVOzxv1nJGyrvNoNOwcYOaLFEOzvQX-IFAwyG30k4YCQZnQGs_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVIcodec_1.2_b113.exe

http://gsf-cf.softonic.com/8dc/446/.../file?SD_used=0&channel=WEB&fdh=no&id_file=35309&instance=softonic_en&type=PROGRAM&Expires=1461455375&Signature=b2ZGmlqL~2vkzJIybcLsdoPhsm9Oydmt2Mzj-Ot4g1O2bnHWfEOOD1W4rs-EirDr7xGzpoAro2yLD2HZKwdV-tESzHNmWxT6KpXYNrYdsLcGTG~WEk5kzn88GLkc7l6v858ivAXxer~RIlVu8XapGxoerXiV2I0GeMHrSiTgZwI_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=AVIcodec_1.2_b113.exe

Scan avicodec_1.2_b113.exe - Powered by Reason Core Security