home

bsga.exe

Bannershop GIF Animator

Selteco Software, Inc.

This is a self-extracting archive and installer. The file has been seen being downloaded from files.downloadnow.com and multiple other hosts.
Publisher:
Selteco  (signed by Selteco Software, Inc.)

Product:
Bannershop GIF Animator

Description:
TIN Setup Std

Version:
2004.08.29.1151A

MD5:
7be4e2413969aaac31f927a34c5057ea

SHA-1:
a4b9904e3e4f23563f666fd0adac94f80af9a6c0

SHA-256:
6961afbd42513b33f73de560e401ad9e2e86dc5b89212f02bb759d28ed92ad13

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 3:39:59 PM UTC  (today)

File size:
1.5 MB (1,542,632 bytes)

Product version:
5.1.2 (Trial)

Copyright:
Copyright (c) 1999-2009 Selteco Software.

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\appdata\local\temp\bsga.exe

Digital Signature
Signed by:
Selteco Software, Inc.

Authority:
Thawte Consulting (Pty) Ltd.

Valid from:
11/5/2008 9:00:00 PM

Valid to:
11/6/2009 8:59:59 PM

Subject:
CN="Selteco Software, Inc.", OU=Software Distribution, O="Selteco Software, Inc.", L=Ajax, S=Ontario, C=CA

Issuer:
CN=Thawte Code Signing CA, O=Thawte Consulting (Pty) Ltd., C=ZA

Serial number:
0D0EA05F7AEAB5FC483D4A33E2B8D492

File PE Metadata
Compilation timestamp:
8/28/2004 10:52:20 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
24576:iznKkUkcKCU54kfvw8CJBF5263HfWJKbTHzOXrLGyJRGaL5WTltVenw2e:izhwUUXLvWJQDzOXrLTtL5WTltV72e

Entry address:
0x1D610

Entry point:
60, BE, 00, 20, 41, 00, 8D, BE, 00, F0, FE, FF, 57, 83, CD, FF, EB, 10, 90, 90, 90, 90, 90, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75...
 
[+]

Packer / compiler:
UPX 2.90LZMA]

Code size:
48 KB (49,152 bytes)

The file bsga.exe has been seen being distributed by the following 7 URLs.

http://files.downloadnow.com/s/software/11/63/11/.../bsga.exe

http://indir.gezginler.net/i/1963/.../

http://gsf-cf.softonic.com/a4b/990/.../file?SD_used=0&channel=WEB&fdh=no&id_file=27396&instance=softonic_es&type=PROGRAM&Expires=1463296610&Signature=RpA4xWSlvSA8WuNUQd~cByEbK2ZXkRldcHbvgL73DA7Iy1V4zKYzmafTgUOADyZVkeN8faqcT0mqBrmohPj6wSb42rTIDAqrz7D7hV6kuH6eWd0vpVlv~0JdzVQVgTj8FzkLaQZO0p1WBMzcccI3Eu80fp6UX3z0Y11Ergd6xhE_&Key-Pair-Id=APKAJUA62FNWTI37JTGQ&filename=bsga.exe

http://bannershop-gif-animator.softonic.com/.../trmsvRChbxdrflJq3ZIylWseXQbxqvWy2ju7k9IwDnxpyVBcRIrtnkVc2TsLtPEMSgiHoQ0o0CK7xI8w1qVEiBn7 07S1RdSFK4LaoruIYD4620fy7uYpyHbp9FplFtZrtD9DWBmp3zhWgyYjsRLErM=

http://indir.gezginler.net/i/1963/.../

http://bannershop-gif-animator.en.softonic.com/download-tracker?th=1/6CH9aeXedl4L8u BHNJXWTW LP1LFlnGQpxqjlxANmFrgIixlXHsW75KghYmvjrVRoxWOFrb9/uiVpEIjy7EQlymXSzDdaq1oTfF8Dg7L 94yRhZcXq5C5XpDkM1t6J6B5/.../tD7E46gXYHQAF14ArqpwoqDjGHGKiTAJk=

http://www.selteco.com/.../bsga.exe

Scan bsga.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.