home

setup sueldos aec.exe

Fabián Marcelo Arias

The executable setup sueldos aec.exe, “Sueldos AEC 2 Installation ” has been detected as malware by 14 anti-virus scanners. This is a setup and installation application, however the file is not signed with an authenticode signature from a trusted source. The file has been seen being downloaded from fabianclub.opendrive.com.
Publisher:
Fabián Marcelo Arias

Description:
Sueldos AEC 2 Installation

Version:
2

MD5:
a27f90407698ca735bcbe52ed1f5fa0f

SHA-1:
f1716b5d6f417753fffb1d8923854ee2867f2ab7

SHA-256:
7acf1013c67fbd03559eb9f84950cb52b37332140819ef36766dc8d00eec9bdd

Scanner detections:
14 / 68

Status:
Malware

Analysis date:
11/28/2024 1:57:38 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Heur.SMHeist.3
347

Arcabit
Trojan.SMHeist.3
1.0.0.425

Bitdefender
Gen:Heur.SMHeist.3
1.0.20.270

Emsisoft Anti-Malware
Gen:Heur.SMHeist
8.16.02.23.07

F-Secure
Gen:Heur.SMHeist.3
11.2016-23-02_3

G Data
Gen:Heur.SMHeist
16.2.25

IKARUS anti.virus
Win32.SuspectCrc
t3scan.1.9.5.0

K7 AntiVirus
Exploit
13.204.16151

McAfee
Artemis!A27F90407698
5600.6481

MicroWorld eScan
Gen:Heur.SMHeist.3
17.0.0.162

Panda Antivirus
Trj/CI.A
16.02.23.07

Qihoo 360 Security
HEUR/QVM05.1.Malware.Gen
1.0.0.1015

Trend Micro
TROJ_GEN.R047C0OCB15
10.465.23

VIPRE Antivirus
Trojan.Win32.Generic
40868

File size:
1.5 MB (1,614,561 bytes)

Copyright:
Fabián Marcelo Arias

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\setup sueldos aec.exe

File PE Metadata
Compilation timestamp:
6/19/1992 7:22:17 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:pAT8QE+kcCH/0n5g73HeyR5D55pWFS8wPgR759Mlun8k4eNcxRHIChM1MAD:pAI+kcnq73HrR5D5jt8vMuNcxa51p

Entry address:
0x25468

Entry point:
55, 8B, EC, 83, C4, F0, B8, 88, 53, 42, 00, E8, 24, F2, FD, FF, B8, C8, 54, 42, 00, E8, 2A, 1C, FE, FF, 8B, 15, 40, 88, 42, 00, 89, 02, 8B, 15, 40, 88, 42, 00, 8B, 12, A1, 48, 88, 42, 00, E8, E4, D3, FF, FF, 8B, 15, 40, 88, 42, 00, 8B, 12, A1, DC, 87, 42, 00, E8, 7A, 64, FF, FF, A1, 40, 88, 42, 00, E8, AC, 4E, FE, FF, E8, DF, E0, FD, FF, 00, 00, 00, FF, FF, FF, FF, 01, 00, 00, 00, 2A, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
145.5 KB (148,992 bytes)

The file setup sueldos aec.exe has been seen being distributed by the following URL.

https://fabianclub.opendrive.com/files/.../Setup Sueldos AEC.exe

Remove setup sueldos aec.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.