home

the sins.exe

The executable the sins.exe has been detected as malware by 5 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from fs08n3.sendspace.com.
MD5:
f81122fded52c9c61714965ad5ecbbe9

SHA-1:
2c61368a6c845d96134a9614c9ec0874011e6e65

SHA-256:
18b7eb4157ffdb2f85994062b24896e975a07ea6e07bd7f6a12046a1eabb7a85

Scanner detections:
5 / 68

Status:
Malware

Analysis date:
11/5/2024 3:35:01 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
MSIL:Agent-DRD [Trj]
160518-2

Emsisoft Anti-Malware
Generic.MSIL.Bladabindi.0C66C880
16.07.03

ESET NOD32
MSIL/Bladabindi.BC trojan
8.0.319.0

Microsoft Security Essentials
Threat.Undefined
1.225.250.0

Norman
Gen:Variant.MSIL.Bladabindi.2
19.05.2016 01:04:49

File size:
132 KB (135,168 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\the sins.exe

File PE Metadata
Compilation timestamp:
7/2/2016 4:48:56 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:IW4VcDRWueXGWolySldMcCKTVuCfGzGt3JnnPJ7X0z:p4V60QIPcaCfGzGD

Entry address:
0x748E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
21.5 KB (22,016 bytes)

The file the sins.exe has been seen being distributed by the following URL.

https://fs08n3.sendspace.com/dl/b0bc9529d3406433f8bd558d0513c476/57782b776ea4c3fa/.../the sins.exe

Remove the sins.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.