home

nazi_zombie_legion.exe

The program is a setup application that uses the NSIS (Nullsoft Scriptable Install System) installer. The file has been seen being downloaded from download1338.mediafire.com and multiple other hosts.
MD5:
725399ae438bac32c02d067d04537d89

SHA-1:
52da30f486b19584a515a667f59a29ff60a13a99

SHA-256:
d9dcfa47e07c9962302700239bcadd90caf81b4b6a435b127c0ebdb7428efb2e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/2/2024 5:18:34 PM UTC  (today)

File size:
310.2 MB (325,224,491 bytes)

File type:
Executable application (Win32 EXE)

Installer:
NSIS (Nullsoft Scriptable Install System)

File PE Metadata
Compilation timestamp:
12/5/2009 5:50:35 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6291456:XpvSZld/0t0lLjYy3T0Qh1djyGqgqkwtR9HbLJ7eICuEl/ay:5v010t0lLXrh19yRfk6R9HJDCzP

Entry address:
0x323F

Entry point:
81, EC, 80, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 30, 91, 40, 00, 33, F6, C6, 44, 24, 14, 20, FF, 15, 30, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, B4, 70, 40, 00, 53, FF, 15, 7C, 72, 40, 00, 6A, 08, A3, 98, 27, 7A, 00, E8, 09, 2C, 00, 00, A3, E4, 26, 7A, 00, 53, 8D, 44, 24, 34, 68, 60, 01, 00, 00, 50, 53, 68, 98, DC, 79, 00, FF, 15, 58, 71, 40, 00, 68, B8, 91, 40, 00, 68, E0, 1E, 7A, 00, E8, BC, 28, 00, 00, FF, 15, B0, 70, 40, 00, BF, 00, 80, 7A, 00, 50, 57, E8, AA, 28, 00, 00...
 
[+]

Entropy:
7.9999

Packer / compiler:
Nullsoft install system v2.x

Code size:
23 KB (23,552 bytes)

The file nazi_zombie_legion.exe has been seen being distributed by the following 17 URLs.

http://download1338.mediafire.com/chfe7c7725jg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/espnfdq6q7hg/.../nazi_zombie_legion.exe

http://download1338.mediafire.com/gekc3ird95gg/.../nazi_zombie_legion.exe

http://download1338.mediafire.com/qkzkhvcr9tqg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/6t8xyug27t2g/.../nazi_zombie_legion.exe

http://download1338.mediafire.com/fihij486g4eg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/8rnz8vk1lmpg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/0gtbn2i48wfg/.../nazi_zombie_legion.exe

http://download1338.mediafire.com/uzb72na6w8xg/.../nazi_zombie_legion.exe

http://download1291.mediafire.com/9uy7ibsb17sg/.../nazi_zombie_legion.exe

http://download1896.mediafire.com/eed2oo2lr8eg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/tq7wcazsplmg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/skdgqvsv46fg/.../nazi_zombie_legion.exe

http://download1853.mediafire.com/h796vja9hazg/.../nazi_zombie_legion.exe

http://download2235.mediafire.com/fbdj9gwdslxg/.../nazi_zombie_legion.exe

http://download1382.mediafire.com/3tu5g5l5tidg/.../nazi_zombie_legion.exe

http://download685.mediafire.com/bfbg05o9jn2g/.../nazi_zombie_legion.exe

Scan nazi_zombie_legion.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.