home

fifa12.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from www.pobieraj.org and multiple other hosts.
MD5:
6838fe43d64da226042fb07817857228

SHA-1:
0dc31d9ad60e797b0f4c03186c769cc5eaf68863

SHA-256:
dc37e8af8805f3d1c317848f17d1c953ea2624df903969327008a9e0c17d8504

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
12/26/2024 6:26:35 AM UTC  (today)

Scan engine
Detection
Engine version

Dr.Web
- infected archive, incurable c:\users\test\appdata\local\temp\dfaf00ec5586c721e2606c584d4e9adfe670
9.0.1.05190

ViRobot
Worm.Win32.A.WBNA.1262059[h]
2014.3.20.0

File size:
1.2 MB (1,262,059 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\fifa12.exe

File PE Metadata
Compilation timestamp:
8/27/2014 6:41:00 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
24576:/F6kcnUu+StVWGAWzONhsapkddjPb4sbQBTlfoQZcpMbVJoP:ULN+0VfAWz+/2DjDJaTfK

Entry address:
0x10BBA

Entry point:
E8, 11, 65, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
112 KB (114,688 bytes)

The file fifa12.exe has been seen being distributed by the following 2 URLs.

http://www.pobieraj.org/fifa12.exe

http://pobieraj.org/fifa12.exe

Scan fifa12.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.