home

arabs got talent - ياسمينا - مصر.exe

The executable arabs got talent - ياسمينا - مصر.exe has been detected as malware by 1 anti-virus scanner. The file has been seen being downloaded from profficers.info.
MD5:
8799522f91ac25236a4f8d6654d9fa24

SHA-1:
a86071911c4511f0b86b9c8d9e59647e8e4f5b7e

SHA-256:
2260712cb06c94062c97929e0869c1ae3cc54b8a81f36eefb32ee5e2c267f98e

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/20/2024 2:07:35 AM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
Threat.Win.Reputation.IMP
16.7.1.10

File size:
1.1 MB (1,131,008 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\ProgramData\{4746cce8-ce0c-510e-4746-6cce8ce033a3}\arabs got talent - ياسمينا - مصر.exe

File PE Metadata
Compilation timestamp:
7/16/2012 11:52:37 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:SBjZ5WaGGjxSysC1MsRCN9/6FtGfmXvgCWfy29dGby/Q:SBjnW9G/sWA/6XzX2qmGv

Entry address:
0xB8B1B

Entry point:
E8, FC, 13, 00, 00, E9, 00, 00, 00, 00, 6A, 14, 68, 90, F0, 4F, 00, E8, 0F, 19, 00, 00, E8, CC, 15, 00, 00, 0F, B7, F0, 6A, 02, E8, 8F, 13, 00, 00, 59, B8, 4D, 5A, 00, 00, 66, 39, 05, 00, 00, 40, 00, 74, 04, 33, DB, EB, 33, A1, 3C, 00, 40, 00, 81, B8, 00, 00, 40, 00, 50, 45, 00, 00, 75, EB, B9, 0B, 01, 00, 00, 66, 39, 88, 18, 00, 40, 00, 75, DD, 33, DB, 83, B8, 74, 00, 40, 00, 0E, 76, 09, 39, 98, E8, 00, 40, 00, 0F, 95, C3, 89, 5D, E4, E8, 3E, 03, 00, 00, 85, C0, 75, 08, 6A, 1C, E8, DC, 00, 00, 00, 59, E8...
 
[+]

Entropy:
7.4133

Code size:
759.5 KB (777,728 bytes)

User Start Menu Item
Name:
Arabs Got Talent - ياسمينا - مصر.exe


The file arabs got talent - ياسمينا - مصر.exe has been seen being distributed by the following URL.

http://profficers.info/hp/?q=MT2XT6DX6LrtSUMOQIyxH5QT/vQigHEnNctCYgDaRTrVAt1oRGl/iGutSfpHIcsyb nllu5YixSkdvtWeMC0onNky2KhXmirQnWT1S1HqQQKXBQ8iqMoFPtzHO9PdSFCFxKGUhT9lV6Y3aXRS0YA9Gk7KkMXYe92hodVXy2cnsXHRd6gAT7B0xPJcSI/2pCPZhmT3A05j3 wit3eI2T1J6EU6akhoaa7hqKGZHE IhSIH08HOGsOzduSCfFa9Ou2 HJwVvstuQ7pbIxZvWFZhW8y0RSf0PTrJYxYy8Mli2xqHb4FqZMv0t0Od4pXhLAL1S493Adkes0pYq235HvI7p6XbFWcfieAUpHyy4PMGMDdeEdSTnRoz3J2C49zVNjo/O5RGZwWhEtzyDsvOasfQSacfgXUR5E3I/W9DKcHlJSXfiVqhQ6WhECsvZSdnHSYQSbdDgYkEkB3I7XL7B4IpM5xM2F63r43S8Vp3h4t9gRAjGBvca3qGea/RkO96rLAd3FQ2/RjSJ/eLXC/mP/dZ3oB7ryMRGqM3qrLbK8ycE9uIfHQVChx6OM0/ItW5cr3BrzfLleoZT/T0YweiQ5x9kn1hneOymxZuT23aLJolzgf8u68p5KxFsh87m2vcwAK6v028dpJ5takkrQBsIXHR5Yj6a1OnFatG/iNwzSnYCnbpMflM2J64/4X4hkp3z4N3grLaLGAcJJuxOCqfhUK4R2TkJS46NQsSajMFAm97beWi3rF2Pk 1BUPfe8xYsvWHA8ECv3FNchaQ4ZelJHK6D38ObyTEez Bof//m1YqQURwwiNyctp6GPDHp rim2NbTBhyKuI1ns7A2/KlMh6/kDJ8qVrK4BMeUs/cVBmT7XgR2jMmP7jG8N 4Bq/4UqPeMHREfok8uhAifHA5A/.../ bKy4EdyAymPVcVbaVeFBP4bGPiFwX1HySS7HZbieDtR46GKxVLKg

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.