home

gl-lokeer blue 13-01-05.exe

MD5:
a0f9720197fbf245a073e46c61c992f8

SHA-1:
1f4420b58b8de83a0d3b1ca73a7a54e0ca1b83e2

SHA-256:
f3be268dbd5260534f4dcb0f78298b2392aa0e336bb6986beed9282e454d5740

Scanner detections:
2 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/15/2024 3:19:44 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Rootkit-gen [Rtk]
160518-2

Dr.Web
Trojan.Click2.47772
9.0.1.05190

File size:
485.5 KB (497,179 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gl-lokeer blue 13-01-05.exe

File PE Metadata
Compilation timestamp:
1/6/2013 1:25:06 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
12288:mKbvhguX8d6C14EuqN7+2g+FIh5DdTNRfwN5e04igZook/ZcEin/3IWV9xacMan:mKbvhguX8d6C14Ee/dTN5wlmu/W

Entry address:
0x1220

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, 94, F2, 44, 00, E8, C8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, 94, F2, 44, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, D4, F2, 44, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, BC, F2, 44, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 5D, E9, 17, EC, 00, 00, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 28, 8B, 45, 10, 89, 04, 24, E8, BF, 3D, 01...
 
[+]

Entropy:
6.0575

Packer / compiler:
Dev-C++ 4.9.9.2

Code size:
259 KB (265,216 bytes)

The file gl-lokeer blue 13-01-05.exe has been seen being distributed by the following URL.

http://rs621p10.rapidshare.com/.../rsapi.cgi?sub=download&fileid=3544876156&filename=GL-LokeER BLUE 13-01-05.exe&directstart=1

Scan gl-lokeer blue 13-01-05.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.