home

warface_hack.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fs11n5.sendspace.com.
MD5:
4d0939746b360de0027035124fdf55f7

SHA-1:
a7c5dd35f61c60eb71be9a52e4f68f30065bf5d3

SHA-256:
ac73b5e09d0f384a75f0d3450a48c325bc8d05d0594dc43b47748ec1575c3f65

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 4:57:17 PM UTC  (today)

File size:
390.7 KB (400,027 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\warface_hack.exe

File PE Metadata
Compilation timestamp:
12/2/2014 8:07:30 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
6144:xY20AljuB28YZgqEYfS1fE1G5mZyJSq9bm2aLZiJCYt04mbRBlLxC7b2hgP0:xY20AljdZgBYfKfeyJSq4282iPEl0

Entry address:
0x1D5DB

Entry point:
8A, E0, FF, C1, 8B, DA, 56, 68, 98, 87, 87, 00, 8B, FF, 89, EE, F6, C4, DD, 00, CD, 14, 5E, C6, C2, 77, 4E, 11, D7, F7, C2, 06, BC, 38, 64, 87, D7, 81, FB, 9C, E5, 00, 00, 88, DE, 68, 40, 6A, B2, 00, 0F, AF, F3, C6, C3, 40, 87, F1, F7, C1, 65, 8E, 46, 39, 69, D2, 82, 7C, 66, AE, 0F, BF, C3, E8, 00, 00, 00, 00, EB, 0A, 69, F2, 89, 3D, CC, 92, 8B, C8, B2, CE, 89, FB, F6, C3, F4, 23, C9, 8B, C9, 69, FF, B0, B2, 4F, 24, 3B, C6, 59, C6, C3, 7E, 3B, DD, 0F, AF, EF, 88, CB, 0F, BE, FF, 84, D0, 81, C1, CC, 07, FA...
 
[+]

Code size:
161.5 KB (165,376 bytes)

The file warface_hack.exe has been seen being distributed by the following URL.

https://fs11n5.sendspace.com/dl/18e20b882d3e24bc7b2950e091e87325/57a0f386040de078/.../warface_hack.exe

Scan warface_hack.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.