home

wademo_old.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from i.download.idg.pl and multiple other hosts.
MD5:
e237212d5e5088c1993d2b9d5336a76d

SHA-1:
dc1206a4ecec274f17ab8303cf673d38b11518d0

SHA-256:
f42800ec0831e43458e854de8befd075364dd2b442459ae221e68f4116a2d64e

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/15/2024 3:26:36 PM UTC  (today)

File size:
13.3 MB (13,931,008 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wademo_old.exe

File PE Metadata
Compilation timestamp:
7/16/1997 2:32:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
4.20

CTPH (ssdeep):
393216:byzpt7Rr7RUGtzSgSGoxw6f6bnTRutagAXVck:bQt9r2GtEDxw6CbTRqg/

Entry address:
0x32AA

Entry point:
FF, 15, 4C, 82, 40, 00, B1, 22, 38, 08, 74, 02, B1, 20, 40, 80, 38, 00, 74, 10, 38, 08, 74, 06, 40, 80, 38, 00, 75, F6, 80, 38, 00, 74, 01, 40, 33, C9, 51, 50, 51, 51, FF, 15, 44, 82, 40, 00, 50, E8, 81, F8, FF, FF, C3, 8B, 44, 24, 04, 8B, 40, 3C, 05, F8, 00, 00, 00, C3, 83, EC, 04, 33, C0, 8B, 0D, 18, 74, 40, 00, A3, DC, 73, 40, 00, A3, 14, 74, 40, 00, 89, 0D, 74, 75, 40, 00, C7, 05, C0, 72, 40, 00, FF, FF, FF, FF, 39, 05, 28, 68, 40, 00, 75, 05, E8, 9B, DE, FF, FF, 83, 3D, FE, 73, 40, 00, 00, 76, 74, 0F...
 
[+]

Entropy:
7.9990

Packer / compiler:
WinZip, 0x32-bit SFX v6.x module

Code size:
16 KB (16,384 bytes)

The file wademo_old.exe has been seen being distributed by the following 50 URLs.

http://i.download.idg.pl/fannef/49381c50cc598a43ba718a4ab28d3b03/56f81a49//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/7edc54d709d4c364687c704e7aa1e582/5817936b//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/324a8bfde4e217feacf45cf8fd45b27f/5766822c//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/e0d5424d567b88fbeb787d1c90d0352d/54d78331//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/757f306916aa40da9bb5065bafda9208/585fda8c//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/b28771b938881e59faf741f2277c78fb/586f225a//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/ab4808aa5f81d7dfacb5dfb8ed8a99b1/57bd91ad//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/9297288b882c0b58648712d26779d853/563f3eb9//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/c726d543ecde81dbb14e3cd544e6def8/569d201e//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/4bfc5c05326d654b6431b67655bdb769/5798f5ae//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/bef6bee5922bc5afe5f82fabf942b382/5292451c//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/8eade8518cfbe64d18a14afea952ac3c/5884e345//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/7b4e4f08abda3041a6a6fdbcdd827e39/54af01e3//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://www.indirveoyna.com/indir.php?id=1250

http://i.download.idg.pl/fannef/6d3ff07ae9e78652db3a289724bb45b0/582c761f//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/cd2c03db618f6f441d35e61a301bd2a1/577eb60c//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/fca6b099f9ab9747e039b3ea842ffdb8/55451457//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/1093e6801d84d60890a2770b07192570/581bd27f//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/bb576c6dc185b7581b18dc2eaea16ac6/57c2c78b//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/95842f38045433f887de4db49253da91/56e6ac04//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/3612e91c3e8b01600d8272f1a4b717f8/5820d59a//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/988b63253f22d12b312207304b37b90e/54db64a9//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/d3e41f5d4c419a404c15f145c4613ae9/57b07287//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/39fc88895b20d72657931ac67bc06a26/57c58750//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/f90c21ab265edbe810116457ca296d39/5725f0ea//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/0e22e98eeca9af7e09e202df983c5ce3/579b79e6//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/415d105eea78466e90bea3f32eb45480/572866e5//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/df7f2ef89ec086a030da8f4cfda5bdbe/58309a4b//zx/cyberjoy/dema/.../Worms_Armageddon.exe

http://i.download.idg.pl/fannef/7f718a76a1798255f81dcdfa6a85e7df/57bb3a6d//zx/cyberjoy/dema/.../Worms_Armageddon.exe

temp:Worms_Armageddon.exe

Latest 30 of 216 download URLs

Scan wademo_old.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.