home

WiiPointsCodeGenerator.exe

WindowsFormsApplication1

Product:
WindowsFormsApplication1

Version:
1.0.0.0

MD5:
5bc3381f289dc40a7054ff6262ce1ba6

SHA-1:
673bf59cd0e41c192d48270ea3a3602a8f673b71

SHA-256:
2a8218eef3b3061f81725160d9a465c4e0352d4d2d443a09ae6fff7e48d5da90

Scanner detections:
4 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
11/14/2024 2:10:41 AM UTC  (today)

Scan engine
Detection
Engine version

Bkav FE
W32.Clodda7.Trojan
1.3.0.4959

Norman
Troj_Generic.RDYOT
11.20150226

Rising Antivirus
PE:Trojan.Win32.Generic.15E8CA5D!367577693
23.00.65.15224

Sophos
Mal/Generic-S
4.98

File size:
42 KB (43,008 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2013

Original file name:
WiiPointsCodeGenerator.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\wiipointscodegenerator.exe

File PE Metadata
Compilation timestamp:
9/7/2013 8:39:08 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:bXh1WvM+ln6k3Kp1LL48c021ovZalR/DkwPcxHVXh1WvM+ln6k3Kp1LL48c021ov:bXaP0EKp1L/c0oovM/DkwPUHVXaP0EKr

Entry address:
0x7AFE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
5.6394

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
23 KB (23,552 bytes)

The file WiiPointsCodeGenerator.exe has been seen being distributed by the following URL.

http://freewiipoints.cc/.../WiiPointsCodeGenerator.exe

Scan WiiPointsCodeGenerator.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.