home

Auction.exe

Auction

eBay Korea Co., Ltd

Publisher:
eBay Korea Co., Ltd  (signed and verified)

Product:
Auction

Version:
1.0.0.0

MD5:
8ef5b54fb1d12f2b1c8c419a370bbf33

SHA-1:
778bf092b9af98a0dd9a0ca370b71b1a9836f03e

SHA-256:
e08f71212e3d7645d161478a5285945eb0cfaa37cf9774bf6abd3bfea49d5cfb

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 4:17:05 AM UTC  (today)

File size:
706.5 KB (723,456 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
Auction.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\auction.exe

Digital Signature
Signed by:
eBay Korea Co., Ltd

Authority:
Symantec Corporation

Valid from:
3/4/2015 9:00:00 AM

Valid to:
5/3/2017 8:59:59 AM

Subject:
CN="eBay Korea Co., Ltd", O="eBay Korea Co., Ltd", L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
27A4737C8F872C833870B41D4F008598

File PE Metadata
Compilation timestamp:
8/31/2015 9:54:36 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
384:5qCeLvP96ukoxxaP0EBIjIa3ei43F7/v8paUo+jrfT0kWFXkoxxaP0EBIjIa3eiL:loLhEBIXi7BMT0NpkoLhEBIXi7e

Entry address:
0x5A9CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 03, 00, 00, 00, 30, 00, 00, 80, 0E, 00, 00, 00, 70, 00, 00, 80, 10, 00, 00, 00, 88, 00, 00, 80, 18, 00, 00, 00, A0, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 06, 00, 02, 00, 00, 00, B8, 00, 00, 80, 03, 00, 00, 00, D0, 00...
 
[+]

Entropy:
2.2897

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
354.5 KB (363,008 bytes)

The file Auction.exe has been seen being distributed by the following URL.

https://download.auction.co.kr/exe/.../auction.exe

Scan Auction.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.