home

worms2.exe

MD5:
a486cdbd2c11cca486eb6a6ea45f6a56

SHA-1:
fc6e0b7e32b64c09e36b1b3c78a37398677a842d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 2:43:26 AM UTC  (today)

File size:
557.5 KB (570,880 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\worms\worms2.exe

File PE Metadata
Compilation timestamp:
3/31/1998 6:24:05 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
3.10

CTPH (ssdeep):
12288:oGrHmf6O6VEChkv3XySUn8I6Q/spTblXvdefzwNh1R+:oGNO6VEtaR/iYzV

Entry address:
0x5FD10

Entry point:
64, A1, 00, 00, 00, 00, 55, 8B, EC, 6A, FF, 68, 88, C3, 46, 00, 68, 38, 42, 46, 00, 50, 64, 89, 25, 00, 00, 00, 00, 83, EC, 60, 53, 56, 57, 89, 65, E8, FF, 15, 5C, A3, 49, 00, A3, 0C, 1C, 48, 00, 33, C0, A0, 0D, 1C, 48, 00, A3, 18, 1C, 48, 00, A1, 0C, 1C, 48, 00, C1, 2D, 0C, 1C, 48, 00, 10, 25, FF, 00, 00, 00, A3, 14, 1C, 48, 00, C1, E0, 08, 03, 05, 18, 1C, 48, 00, A3, 10, 1C, 48, 00, E8, 1A, 2C, 00, 00, E8, 25, 0C, 00, 00, 85, C0, 75, 0A, 6A, 10, E8, 2A, 01, 00, 00, 83, C4, 04, C7, 45, FC, 00, 00, 00, 00...
 
[+]

Entropy:
6.5246

Developed / compiled with:
Microsoft Visual C++ v4.2

Code size:
423.5 KB (433,664 bytes)

The file worms2.exe has been seen being distributed by the following 2 URLs.

http://s10269.chomikuj.pl/File.aspx?e=a-hNTGT2zM3JJdVjYQrlxcB7JivMdlinUn8eQQqjgZ0IiLBlit-q79iLOkA7PxZJQx0N_zQFG4UF81rsDiXnrCSYTA84FyEnzhnPJk7CAYNsAm8ihCB8CMkco3iEKyg73gCcMR6c69n0drJEx63YLg&pv=2

http://s10269.chomikuj.pl/File.aspx?e=a-hNTGT2zM3JJdVjYQrlxcB7JivMdlinUn8eQQqjgZ1yFZvPWvBIjKZeTQUKyrOMe8Vwz5RehDwGWg5f6dF05pMvfcjLqLRJAXa52-SIz9bPX9mGULxfYP_bkUwGJx5XWghiHyxHQTzhT3unlSW2BQ&pv=2

Scan worms2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.