home

sa-multihack.exe

Ph1012.com

Publisher:
Ph1012.com

Description:
by Saturos

Version:
1.0.0.0

MD5:
627c2cbe6fee3b6cb70d700126762d1e

SHA-1:
3622ba017eeb579d08e3df51c83f347bde5d1405

SHA-256:
25d23bc27b890e02878c0c4720478b3b803bdc30a7688d8d788c7cfc32211333

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/26/2024 5:20:47 AM UTC  (today)

File size:
635 KB (650,240 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Language:
English (Australia)

Common path:
C:\users\{user}\downloads\sa-multihack.exe

File PE Metadata
Compilation timestamp:
11/17/1999 9:56:39 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:HBkaTqVvZw7EE6zhKhAmfGhSiGy0G0G4:HuuqVa7Hqa1/FyJ

Entry address:
0xA4721

Entry point:
83, 3C, 24, FE, 77, FE, 8D, 64, 24, CC, 60, 83, EC, DC, E8, 40, FE, FF, FF, 4B, 66, 4B, 75, FC, A8, 4F, F6, D0, FF, 73, 3C, 59, 81, E9, FD, FF, FF, 7F, 0F, 83, E7, FF, FF, FF, 81, D9, E6, 13, 00, 00, 71, DF, 8A, E7, F6, D0, FF, B4, 19, E4, 13, 00, 80, 83, C4, 04, 66, 81, 44, 24, FC, B0, BA, 75, C8, 21, D1, 04, 00, 68, 27, 04, 79, 2A, EB, 03, 4E, 11, C7, E8, F1, FE, FF, FF, 89, 74, 24, 44, E8, 88, 96, FF, FF, 89, 44, 24, 34, 83, E8, 04, 72, 70, 41, 04, 00, 4F, 64, A1, 18, 00, 00, 00, 85, C0, 78, 0C, F6, D1...
 
[+]

Entropy:
5.9090

Code size:
351 KB (359,424 bytes)

The file sa-multihack.exe has been seen being distributed by the following URL.

http://www14.zippyshare.com/d/87400355/.../SA-MultiHack.exe

Scan sa-multihack.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.