home

WoDBKO.exe

WoDBKO Client

by Nimfomanka

This is a setup program which is used to install the application. The file has been seen being downloaded from www72.zippyshare.com and multiple other hosts.
Publisher:
by Nimfomanka

Product:
WoDBKO Client

Version:
1.00

MD5:
c058cac7d6b26ee6f1845f1329424b5f

SHA-1:
b33861a080157b757c012e78968506617badc86a

SHA-256:
433d7483e880a7061d7ad1ec572017ccdb88a724246ea69d27de32ddb21c9eed

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 11:04:13 PM UTC  (a few moments ago)

File size:
11.8 MB (12,424,084 bytes)

Product version:
1.00

Copyright:
Copyright (C) Nimfomanka 2016-2016

Trademarks:
Tibia is a registered Trademark of CipSoft GmbH.

Original file name:
WoDBKO.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\wodbko.exe

File PE Metadata
Compilation timestamp:
6/26/2007 11:41:32 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
196608:iyJzd7vJvPnk1p0YJOEVxCb4aQL6MyiYap8lJ4KQ/qCLKrE8d2v3p6/I:1zdFv6p0rQCb416Jix2J4KQ/3LKxwQ/I

Entry address:
0x3DDB33

Entry point:
E8, 00, 00, 00, 00, 60, E8, 4F, 00, 00, 00, AF, 33, F6, F2, E6, C9, D8, 7E, DB, A4, BF, 7C, 05, 0F, 79, 76, A8, 56, 79, 8B, 4D, F4, FB, DA, AB, 65, 7F, 6C, F6, C4, 63, 21, FB, F3, 0A, E3, F1, BA, 57, C1, E8, 73, 43, 2B, 44, 58, 26, 27, D6, 19, DC, C9, 2E, 80, 6E, 5F, D6, 19, DC, C9, 2E, 80, 6E, 5F, E9, 1A, 6D, 00, 00, E9, 2E, 6D, 00, 00, E9, 29, 6D, 00, 00, E8, 6E, FB, FF, FF, 6E, 04, 01, 00, 8E, 99, 00, 00, AF, D5, 37, 10, EE, 30, D1, A6, 6D, FD, 74, 26, BA, 80, 91, 5F, 78, B5, D0, 2D, 50, 0F, 69, B5, A0...
 
[+]

Packer / compiler:
MoleBox v2.0

The file WoDBKO.exe has been seen being distributed by the following 9 URLs.

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

http://www72.zippyshare.com/d/FAflBFTQ/.../WoDBKO.exe

Scan WoDBKO.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.