home

BankFGate.dll

BANK_DLL

Kiwoong Information & Communication

Publisher:
KWIC  (signed by Kiwoong Information & Communication)

Product:
BANK_DLL

Version:
1.00

MD5:
fca12f3df79541429b9ecd99dc2fc497

SHA-1:
989aafa051197201c5bee8dc7c5e1f014f53c91c

SHA-256:
25c09471d73da4df73c614ebdd2f6d04f7d6a51b0958db0d1b2db8cbad7e54b6

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/23/2024 4:35:54 PM UTC  (today)

File size:
290.1 KB (297,096 bytes)

Product version:
1.00

Copyright:
Copyright 기웅정보통신(주)

Original file name:
BankFGate.dll

File type:
Dynamic link library (Win32 DLL)

Common path:
C:\users\{user}\appdata\locallow\kwic\script\dll\bankfgate.dll

Digital Signature
Signed by:
Kiwoong Information & Communication

Authority:
Thawte, Inc.

Valid from:
4/22/2011 9:00:00 AM

Valid to:
6/21/2013 8:59:59 AM

Subject:
CN=Kiwoong Information & Communication, O=Kiwoong Information & Communication, L="Geumcheon-gu ", S=SEOUL, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
060CC5C4DB6D031FCDC2C2069833A5BD

Registration
CLSID:
{D7ADEA52-35FD-4906-B7F6-7C5910C79D76}

ProgID:
BANKF_DLL.Cls_BankFGate

COM registered:
Yes

File PE Metadata
Compilation timestamp:
5/23/2011 2:38:07 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
1536:jQPf9LZUDvAOHJpKvcN/kcOknENaIzsaf88hTVe:jOldUDAOZnOJR5je

Entry address:
0x1D4C

Entry point:
5A, 68, 90, 3A, 04, 11, 68, 94, 3A, 04, 11, 52, E9, E7, FF, FF, FF, 00, 00, 00, 48, 00, 00, 00, 30, 00, 00, 00, 40, 00, 00, 00, 00, 00, 00, 00, C7, 18, 1A, 49, C9, A8, ED, 46, 9B, B6, B6, EF, 91, 22, 0E, 3C, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 00, 00, 00, 00, 00, 00, 42, 41, 4E, 4B, 46, 5F, 44, 4C, 4C, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 90, 00, 00, 00, 00, 00, 00, 00, 02, 00, 00, 00, 01, 00, 00, 00, 52, EA, AD, D7, FD, 35, 06, 49, B7, F6, 7C, 59, 10, C7, 9D, 76...
 
[+]

Entropy:
4.2821

Developed / compiled with:
Microsoft Visual Basic v6.0

Code size:
260 KB (266,240 bytes)

Automation Object
CLSID:
{D7ADEA52-35FD-4906-B7F6-7C5910C79D76}

CLSID name:
BANKF_DLL.Cls_BankFGate


Scan BankFGate.dll - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.