moba.exe

huyenthoaimoba

Net Dragon

This is a setup program which is used to install the application. The file has been seen being downloaded from cdn.scoin.vn.
Publisher:
Net Dragon

Product:
huyenthoaimoba

Description:
CosLauncher

Version:
1.0.0.0

MD5:
80029f90144a4c5fbc2c258a6e66361f

SHA-1:
09a22641211496136f157b4ecc3c1af67474a16d

SHA-256:
d77212e170093f86642bc5476e4ddf8bb3cf53498346627dbf2e5102d8fd6f9e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 8:37:15 PM UTC  (today)

File size:
903.9 KB (925,600 bytes)

Product version:
1.0.0.0

Copyright:
Net Dragon

File type:
Executable application (Win32 EXE)

Language:
Chinese (Simplified, PRC)

Common path:
C:\users\{user}\downloads\moba.exe

File PE Metadata
Compilation timestamp:
4/2/2016 10:20:05 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:C3lDTOnCTLkh93fjVuLi1BiS3ZP16zzWE:qlDTaCTLkh9fFJP16WE

Entry address:
0x30FB

Entry point:
8D, 3D, 45, 06, C4, E7, F3, 68, 19, 93, 27, 00, 0F, BF, DD, 8D, 1D, 93, 64, 33, C5, C6, C2, D5, 05, C5, 1B, EE, F3, 69, F9, D1, 2F, 88, 2B, F6, C4, 8C, F2, 3B, C2, 73, 02, 85, D9, 88, D1, F2, E8, 27, 00, 00, 00, 2C, 95, 1B, FF, 81, E7, B4, D6, 5C, D7, 43, 81, DF, 2A, 60, 65, B0, 84, C2, B9, D5, E1, 00, 00, FF, CF, 02, E4, FF, CD, 81, F1, 0F, DE, 00, 00, 0F, AF, D5, 5F, 41, 8A, D2, 51, BE, 76, 42, D7, 0F, F2, 8A, F3, 88, EA, 05, 16, 8A, 3F, 05, 74, 02, FE, C4, B0, 91, 0F, AF, E8, C7, C2, D5, E3, B8, C3, 87...
 
[+]

Entropy:
7.9842  (probably packed)

Code size:
23 KB (23,552 bytes)

The file moba.exe has been seen being distributed by the following URL.

Scan moba.exe - Powered by Reason Core Security