home

setupcasino.exe

Casino Software Installer

Product:
Casino Software Installer

Description:
Imperial Casino

Version:
1, 0, 0, 1

MD5:
21a8723b82c896bd4c5cc58a3c58c309

SHA-1:
13c7136339d4b0e75e626e5d99e374ab263708d6

SHA-256:
8e15aaf95c541aa39b0d0c066ef248a7e264895aa3eb5043663bdbad851ed7bb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 1:36:52 AM UTC  (today)

File size:
471.5 KB (482,816 bytes)

Product version:
1, 0, 0, 1

Copyright:
Copyright (C) 2001-2015

Original file name:
CasinoDownloader2.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\setupcasino.exe

File PE Metadata
Compilation timestamp:
10/27/2012 3:00:35 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
6144:5HZECj/Kk43bo2VwkUmrUj+YKTu6VaUBdl4h/2hG3wHNo:5OCTT43bPVvUj+YsPa+hNo

Entry address:
0x33B7C

Entry point:
B8, EC, BC, 67, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, 97, B2, 66, 0F, BB, 45, A5, CC, D4, FA, 0C, ED, D2, 40, 7B, 39, A1, EF, C7, 07, 2F, 91, 82, A3, 3A, 8A, 3C, E0, 7F, 6B, 92, 8D, 90, 48, 97, 12, 11, 61, 36, 21, 39, BB, 20, BE, 85, A6, 16, 79, 2E, 49, 48, 98, AC, 1A, 5E, 97, 2C, A3, 24, A9, E2, AC, C4, A6, 2D, 6A, 0C, 6F, 7A, 9B, 23, 32, E6, 6D, AE, 0E, 5F, 2F, 9D, F7, 20, B1, DF, 59, AC, D2, C7, 98, 89, FB, C4, F6, 0D...
 
[+]

Entropy:
6.8486

Packer / compiler:
PECompact v2

Code size:
364 KB (372,736 bytes)

The file setupcasino.exe has been seen being distributed by the following 2 URLs.

http://bit.do/icasino

http://bit.do/myr

Scan setupcasino.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.