{blocked}.exe

Pepak

The executable {blocked}.exe has been detected as malware by 1 anti-virus scanner.
Publisher:
Pepak  (signed and verified)

MD5:
81405fb5e9780b0c7a71fe3fb60cb44c

SHA-1:
934ead6b6ac5e9704ec36c914d576118edf7b021

SHA-256:
34cc507ea494c4e9efa9e308ead37639338e9c46f636c84f69ccba526b26b184

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
12/26/2024 9:17:20 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.8.2.11

File size:
1.1 MB (1,104,312 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:

Authority:
Pepak (root CA)

Valid from:
1/30/2014 9:51:44 PM

Valid to:
1/30/2015 9:51:43 PM

Subject:
CN=Pepak, E=http://www.pepak.net

Issuer:
CN=Pepak (root CA), E=http://www.pepak.net

Serial number:
B377576699E3CF924F96A97B44BBE215

File PE Metadata
Compilation timestamp:
8/21/2014 9:39:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:lFclrlZEAov5+FXIFybfLFolER7/A87gkcayJlT6TqnuFwcyXU98888888888882:zarMAoh+FXIFazFols/lgPaybTA+uA

Entry address:
0x927B4

Entry point:
55, 8B, EC, 83, C4, D8, 53, 56, 57, 33, C0, 89, 45, EC, 89, 45, D8, B8, 14, 16, 49, 00, E8, D5, 58, F7, FF, 33, C0, 55, 68, DA, 28, 49, 00, 64, FF, 30, 64, 89, 20, 33, C0, 55, 68, 3F, 28, 49, 00, 64, FF, 30, 64, 89, 20, A1, 0C, 83, 49, 00, 33, D2, 89, 10, A1, 1C, 86, 49, 00, 8B, 00, E8, 04, 9F, FE, FF, A1, 1C, 86, 49, 00, 8B, 00, BA, F8, 28, 49, 00, E8, 6F, 99, FE, FF, 8B, 0D, 00, 84, 49, 00, A1, 1C, 86, 49, 00, 8B, 00, 8B, 15, D0, FF, 48, 00, E8, F3, 9E, FE, FF, A1, 1C, 86, 49, 00, 8B, 00, E8, 37, A0, FE...
 
[+]

Entropy:
5.8582

Developed / compiled with:
Microsoft Visual C++

Code size:
581 KB (594,944 bytes)

Remove {blocked}.exe - Powered by Reason Core Security