home

haxors twitter verifier.exe

WindowsApplication6

The executable haxors twitter verifier.exe has been detected as malware by 2 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from doc-00-48-docs.googleusercontent.com and multiple other hosts.
Product:
WindowsApplication6

Version:
1.0.0.0

MD5:
4a400f1870cbb948530323fcbb4cc102

SHA-1:
c273af7d5f23e264ca54503956d73b6dcada72d4

SHA-256:
65596dafd6a974215c79b839b2106672c8e365991518c7717b843e6d5f0b7af6

Scanner detections:
2 / 68

Status:
Malware

Analysis date:
11/5/2024 12:56:07 PM UTC  (today)

Scan engine
Detection
Engine version

Avira AntiVirus
SPR/Hacktool.jjs
7.11.213.54

ESET NOD32
MSIL/FakeTool.ADY
9.11258

File size:
12.5 MB (13,061,632 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2012

Original file name:
WindowsApplication6.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

File PE Metadata
Compilation timestamp:
10/18/2012 11:13:21 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
393216:Ml9ODfAiF6ACDUs45cv+CfkJBL4y9679pX8+N/:W9I5CDU558PkJBL4P797N

Entry address:
0xC7598E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 91, 1C, 80, 50, 00, 00, 00, 00, 02, 00...
 
[+]

Entropy:
7.9732

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
12.5 MB (13,056,512 bytes)

The file haxors twitter verifier.exe has been seen being distributed by the following 2 URLs.

https://doc-00-48-docs.googleusercontent.com/docs/securesc/j945hnlna45jvig499c2ijvlhkq9hue6/phkvbmcfqf9g80lu7mmf6t2vtndb211n/1467244800000/.../15636304360644246726/0BwngOSQ9S5zxZ2tnQlZWallyRUU?e=download

http://download1239.mediafire.com/7o23ddz3a3tg/.../Haxor\'s Twitter Verifier.exe

Remove haxors twitter verifier.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.