home

ssn.exe

Simple Sticky Notes

Simnet Bilgisayar Yazilim Hiz. San. ve Tic. Ltd. Sti.

The executable ssn.exe has been detected as malware by 4 anti-virus scanners. It is set to automatically start when a user logs into Windows via the current user run registry key under the display name ‘Simple Sticky Notes’.
Publisher:
Simnet Ltd.   (signed by Simnet Bilgisayar Yazilim Hiz. San. ve Tic. Ltd. Sti.)

Product:
Simple Sticky Notes

Version:
3.5.0.0

MD5:
35b80e8e55ce2f4f2127554f0d48ede4

SHA-1:
9b6619dbe8cbfabb6f4aec78c2bc3feab3e86083

SHA-256:
077b5b6cb565477824b74a2e8c78dca6599ddb290b0a50eb25e10efe260094a2

Scanner detections:
4 / 68

Status:
Malware

Analysis date:
12/29/2024 10:52:46 AM UTC  (today)

Scan engine
Detection
Engine version

AVG
Win32/Floxif.A
2013.0.4477

ESET NOD32
Win32/Floxif.H virus
6.3.12010.0

F-Prot
W32/Floxif.B
4.6.5.141

F-Secure
Win32.Floxif.A
5.15.154

File size:
749 KB (766,927 bytes)

Product version:
3.5.0.0

Copyright:
Copyright (C) Simnet Ltd. 2016

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\Program Files\simnet\simple sticky notes\ssn.exe

Digital Signature
Signed by:
Simnet Bilgisayar Yazilim Hiz. San. ve Tic. Ltd. Sti.

Authority:
Symantec Corporation

Valid from:
1/21/2015 8:00:00 AM

Valid to:
2/20/2018 7:59:59 AM

Subject:
CN=Simnet Bilgisayar Yazilim Hiz. San. ve Tic. Ltd. Sti., O=Simnet Bilgisayar Yazilim Hiz. San. ve Tic. Ltd. Sti., L=Istanbul, S=Istanbul, C=TR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
22CAF533121458F99EA740F7E422B52A

File PE Metadata
Compilation timestamp:
6/16/2016 7:35:55 PM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
14.0

CTPH (ssdeep):
12288:3JwDcJAvtCenNOKJVCR0bOKH5dzGoshEPnQavxp0+TZvyDShsu5i0HKiYXBc0fYc:Zwyos2w+TIDp2i05EBcTvC/rEH7Q

Entry address:
0x22064

Entry point:
E9, 05, A5, FF, FF, E9, 70, FE, FF, FF, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 51, 56, FF, 75, 08, 8B, F1, 89, 75, FC, E8, A0, 00, 00, 00, C7, 06, C8, A9, 44, 00, 8B, C6, 5E, 8B, E5, 5D, C2, 04, 00, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 83, 61, 04, 00, 8B, C1, 83, 61, 08, 00, C7, 41, 04, D0, A9, 44, 00, C7, 01, C8, A9, 44, 00, C3, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, CC, 55, 8B, EC, 51, 56, FF, 75, 08, 8B, F1, 89, 75, FC...
 
[+]

Entropy:
7.4615

Packer / compiler:
tElock 0.99 - 1.0 private

Code size:
272 KB (278,528 bytes)

Startup File (User Run)
Registry location:
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run

Name:
Simple Sticky Notes

Command:
C:\Program Files\simnet\simple sticky notes\ssn.exe


Remove ssn.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.