home

badakmemo.exe

(주)이비즈네트웍스

Publisher:
(주)이비즈네트웍스  (signed and verified)

Description:
바닥메모

Version:
1.0.1.0

MD5:
97ca90e0f7a1cceefba6c7ce64efc301

SHA-1:
0b90b393e5b34b1c60c911dcea6779f3c2bc630c

SHA-256:
38d9280bc4b32b9034e7e54b51d88a45c4ca178fda8b114865cc7deeb20cfe67

Scanner detections:
2 / 68

Status:
Clean  (2 probable false positive detections)

Explanation:
These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:
7/6/2025 11:19:05 AM UTC  (today)

Scan engine
Detection
Engine version

Comodo Security
UnclassifiedMalware
18149

Trend Micro House Call
TROJ_GEN.F47V0205
7.2.113

File size:
950 KB (972,752 bytes)

Product version:
1.0.1.0

Copyright:
Copyright(c) 2013,. Ebiz NTS., All Rights Reserved.

File type:
Executable application (Win32 EXE)

Common path:
C:\Program Files\badakmemo\badakmemo.exe

Digital Signature
Signed by:
(주)이비즈네트웍스

Authority:
Thawte, Inc.

Valid from:
9/1/2011 9:00:00 AM

Valid to:
9/1/2013 8:59:59 AM

Subject:
CN=(주)이비즈네트웍스, O=(주)이비즈네트웍스, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
3B74D9377884648259B4BD65FA2A021F

File PE Metadata
Compilation timestamp:
6/13/2013 10:39:46 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
12288:jf5L4FgKhyiFXOIlsIpZvfsJ62JWmQGWkSA9sVG27yjBMV:9xkyiF+xILME2JWmQ5k527yjc

Entry address:
0xB89C0

Entry point:
55, 8B, EC, 83, C4, F0, B8, BC, 6E, 4B, 00, E8, 54, E3, F4, FF, 68, 5C, 8A, 4B, 00, 6A, 00, 68, 01, 00, 1F, 00, E8, E3, E7, F4, FF, 85, C0, 75, 6D, 68, 68, 8A, 4B, 00, E8, 4D, E7, F4, FF, 0F, B7, C0, 8B, 15, B8, B3, 4B, 00, 89, 02, 68, 74, 8A, 4B, 00, E8, 38, E7, F4, FF, 0F, B7, C0, 8B, 15, 1C, B2, 4B, 00, 89, 02, A1, 78, B4, 4B, 00, 8B, 00, E8, 61, A8, FB, FF, A1, 78, B4, 4B, 00, 8B, 00, BA, 88, 8A, 4B, 00, E8, 08, A3, FB, FF, 8B, 0D, 94, B2, 4B, 00, A1, 78, B4, 4B, 00, 8B, 00, 8B, 15, F4, 09, 4B, 00, E8...
 
[+]

Entropy:
6.6775

Developed / compiled with:
Microsoft Visual C++

Code size:
732 KB (749,568 bytes)

Windows Firewall Allowed Program
Name:
C:\Program Files (x86)\BadakMemo\Badakmemo.exe


Scan badakmemo.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.