My Cf Acc 2nd.exe

The executable My Cf Acc 2nd.exe has been detected as malware by 9 anti-virus scanners. The file has been seen being downloaded from fs11n1.sendspace.com.
Description:
My Cf Acc 2nd

Version:
1.0.0.0

MD5:
91db34f0f86ee48e7370478f6f0c15b8

SHA-1:
4b398ab7b770803bae1e1aeb2c304844ccba0996

SHA-256:
ba54160fe834c1efd6eaa0525ca7c698ff472ccbbc74952ad342eb5ec4dfc907

Scanner detections:
9 / 68

Status:
Malware

Analysis date:
12/26/2024 11:52:51 AM UTC  (today)

Scan engine
Detection
Engine version

avast!
MSIL:KeyLogger-AB [Spy]
160518-2

Dr.Web
Trojan.Siggen3.14508
9.0.1.05190

Emsisoft Anti-Malware
Gen:Heur.MSIL.Krypt
11.5.0.6191

ESET NOD32
MSIL/Spy.Agent.BP trojan
7.0.302.0

F-Prot
W32/MSIL_Troj.F.gen
4.6.5.141

F-Secure
Generic.Malware.GSD.35D65228
5.15.96

McAfee
Trojan.PWS-Zbot.gen.yg
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.221.714.0

Norman
Generic.Malware.GSD.35D65228
19.05.2016 05:17:13

File size:
37 KB (37,888 bytes)

Product version:
1.0.0.0

Copyright:
My Cf Acc 2nd

Original file name:
My Cf Acc 2nd.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\my cf acc 2nd.exe

File PE Metadata
Compilation timestamp:
5/23/2016 6:39:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:qFJbmmBmT7+VWhxvJ916bnUvx5018Msip52FnjiFJzu56rwV:4bmmBmT7kExR91E4s8up52FnjiF66rI

Entry address:
0xAADE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6434

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
35 KB (35,840 bytes)

The file My Cf Acc 2nd.exe has been seen being distributed by the following URL.

Remove My Cf Acc 2nd.exe - Powered by Reason Core Security