Malware scan of mod_sa.v4.4.0.0.sa-mp.v0.3.7.r1.setup.exe dc55e98402791cad744b8843edc300fc3b342873

File name:

mod_sa.v4.4.0.0.sa-mp.v0.3.7.r1.setup.exe

MD5:

56b850c17b0163c4de4f86e82e11273b

SHA-1:

dc55e98402791cad744b8843edc300fc3b342873

SHA-256:

e79672c0f82db4479dda53fb5297fb3629d944555212a3c8e1f83eadb57384b5

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

11/23/2024 8:15:35 AM UTC (today)

Scan engine

Detection

Engine version

Quick Heal

(Suspicious) - DNAScan

5.15.14.00

Trend Micro House Call

Suspicious_GEN.F47V0501

7.2.150

Zillya! Antivirus

Trojan.Agent.Win32.108765

2.0.0.2191

File size:

719.4 KB (736,681 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Common path:

C:\users\{user}\downloads\mod_sa.v4.4.0.0.sa-mp.v0.3.7.r1.setup.exe

Compilation timestamp:

12/5/2009 10:50:46 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

12288:FbB9YVZx91tkGDXIV3nrRw7dYBj3QVY63HwcQ4QGlBgZIr+Gmas/26BVy+Ft:FbTAZdRunG7dYBj3BcQ94Bgar+7aL6LH

Entry address:

0x323C

Entry point:

81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 58, 3F, 42, 00, E8, 09, 2C, 00, 00, A3, A4, 3E, 42, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 58, F4, 41, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, A0, 36, 42, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 90, 42, 00, 50, 57, E8, AA, 28, 00, 00... 
[+]

Entropy:

7.9403

Packer / compiler:

Nullsoft install system v2.x

Code size:

23 KB (23,552 bytes)

The file mod_sa.v4.4.0.0.sa-mp.v0.3.7.r1.setup.exe has been seen being distributed by the following 50 URLs.

http://www87.zippyshare.com/d/fcjS3rjx/.../mod_sa.v4.4.0.0.SA-MP.v0.3.7.R2.Setup.exe

http://www.speedyshare.com/a6apb/e7a3549c/.../mod-sa.v4.4.0.0.SA-MP.v0.3.7.R1.Setup.exe

http://www87.zippyshare.com/d/fcjS3rjx/.../mod_sa.v4.4.0.0.SA-MP.v0.3.7.R2.Setup.exe

https://docs.google.com/uc?id=0B1_7uT1mjrSLcWFQbTZRMDNTYjA&export=download

http://www102.zippyshare.com/d/KA8rVlim/.../mod_sa.v4.4.0.0.SA-MP.v0.3.7.R2.Setup.exe

http://takebin.com/.../0BM8aaitCC84JksGWxMcM2UfHip63G7KTj2rqKp9IQP0JR3PUmFzNbNVEIaXJRBG

http://www87.zippyshare.com/d/fcjS3rjx/.../mod_sa.v4.4.0.0.SA-MP.v0.3.7.R2.Setup.exe

http://www.speedyshare.com/a6apb/685998e1/.../mod-sa.v4.4.0.0.SA-MP.v0.3.7.R1.Setup.exe

Latest 30 of 68 download URLs