home

pivot-stickfigure-animator-4.2.1.exe

The executable pivot-stickfigure-animator-4.2.1.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from a.digallstateinfinity.info.
MD5:
d02211123477242d699825e5acbc9fcd

SHA-1:
6ce3fb4e6e8de8900261961d8c6902c8c3a29fb8

SHA-256:
d55556d3abc34c243ce299ff1807a89ab6f2bb4e6df7639d4df701180751ea95

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
11/30/2024 8:59:57 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.6.3.3

File size:
2.4 MB (2,563,072 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\pivot-stickfigure-animator-4.2.1.exe

File PE Metadata
Compilation timestamp:
8/31/2012 4:11:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
6144:SPVgE8xZoU1D0gc+Gd8nSSAO/r1v0FFyURHcbytVUMochIIyDKV:EYeo0gcnd8nj/ZsIUB6sUMvhfyDw

Entry address:
0x2123AB

Entry point:
E8, 56, 12, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 50, 09, 64, 00, E8, 5F, 17, 00, 00, E8, 23, 14, 00, 00, 0F, B7, F0, 6A, 02, E8, E9, 11, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, C8, 0B, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
1.3907

Code size:
2.1 MB (2,192,384 bytes)

The file pivot-stickfigure-animator-4.2.1.exe has been seen being distributed by the following URL.

http://a.digallstateinfinity.info/hp/?q=hoxhIzMytIEBBCDWYSJSU/iOIUGC6UkuoG2wszTFHJqDBiUv42yAQfhJfiVmMCawk8/lpc53Oaa4RlRHhQk1zee skGJuOkNkQ2FGQmtj3Mc5PhUUX TbR2JZ4sbLmxHtYHdd1aRbgx/Zhs8kBnJOe8p5Bark8aCeZFFaNN3BY0B1SC7i2VrmKzgZQVjnEh7srybqIna97vF54p2urhduzsa50oo TbbflD1OTLgiEKcG0JNwShjrwpSrva5nuFXBiKqtQ3sTAWiv5eO0ypiXVEg1lhCStRL/44tkB0rBRw3RnZ2am026MwNzivkmQdea Bsg6Ti JsCTv9acFJtLlJ9YczQ6fofsGPso5J5yzfxU0rx5CbZf9D6jlLxhYAuHvutV7PZdanjACLEjRYjuFPYUfm4fSFeEmMquRgyaVKHsgcS1r7pjAjbkIxtJlSIegDfk9liafBtdxbzzphMeOgq512GKqMXsv1K8/jgjlBZgyQv6kRJ wEOzd0smtx3fAvuRcbVumlZ6U7YqzpyuQcNRPvj1gf o0zs7flWBuTEp eBGSqjR6U4WNI0FZyoVGEhfHwEo8RHKUYzC4MR/h5nQ4D6RuSQHtr8EGJKsjYw/S8cJjeuBzLmGP1MfqtZS6Zhb8hlTBBfwERCNxkG/fokM9c4pVr7y2toRjiVTa2KmzAo4OcbPzZn41YIlwJHOSKAZmDfdkFJbvk/RZL49RWz0PLNjl4tQelsQ8xWTjbXZD5bGXKMqw p4E0QOSJFH7HYWTeqOPVmQIXSGDBrkykFrRedq5mRxQ43PbJKHbBrSnU9UNwZ nGbco8xwLDqOH6TlX0ea0q1fxENkaaRNfeI5GVQM7VihMCvQ6dHtX8C2vdy2wSSgW/.../i WF2DC8OeaUnFSkViokTEs9ARDATDFG9Mp9pN9dYEO5qpQ94LkFazzfdqFqzmG5i0izf

Remove pivot-stickfigure-animator-4.2.1.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.