home

bz4setup.exe

빵집

양병규

The program is a setup application that uses the Inno Setup installer. The file has been seen being downloaded from cfile26.uf.tistory.com and multiple other hosts.
Publisher:
양병규

Product:
빵집

Description:
빵집 Setup

MD5:
aa6d3a3f892c9082079abcf37096cdf8

SHA-1:
2afe648085a90a710ab512f98a5a7097330577b3

SHA-256:
7433cedf61f7adf52fe6b16225f305d1f4c3379598997090d9defdf33a3c2885

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/20/2024 2:53:09 AM UTC  (today)

File size:
2.9 MB (3,077,947 bytes)

Product version:
4.0

Copyright:
양병규 delmadang@hanmail.net

File type:
Executable application (Win32 EXE)

Installer:
Inno Setup

Common path:
C:\users\{user}\downloads\bz4setup.exe

File PE Metadata
Compilation timestamp:
6/10/2010 11:33:52 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
49152:fhukWdMAynZI8RkPzQCnQXLNqM3nByEx1iqPm5h8SWy8Na7zj9OiET:fcktxmr2F3n8Ex1jPm5h8NX03jg7T

Entry address:
0x163C4

Entry point:
55, 8B, EC, 83, C4, A4, 53, 56, 57, 33, C0, 89, 45, C4, 89, 45, C0, 89, 45, A4, 89, 45, D0, 89, 45, C8, 89, 45, CC, 89, 45, D4, 89, 45, D8, 89, 45, EC, B8, 54, 55, 41, 00, E8, 70, 04, FF, FF, 33, C0, 55, 68, 91, 6A, 41, 00, 64, FF, 30, 64, 89, 20, 33, D2, 55, 68, 4D, 6A, 41, 00, 64, FF, 32, 64, 89, 22, A1, 48, AB, 41, 00, E8, A6, EF, FF, FF, E8, B1, EA, FF, FF, 8D, 55, EC, 33, C0, E8, FB, 87, FF, FF, 8B, 55, EC, B8, A8, D6, 41, 00, E8, A6, EA, FE, FF, 6A, 02, 6A, 00, 6A, 01, 8B, 0D, A8, D6, 41, 00, B2, 01...
 
[+]

Entropy:
7.9819

Developed / compiled with:
Microsoft Visual C++

Code size:
85 KB (87,040 bytes)

The file bz4setup.exe has been seen being distributed by the following 8 URLs.

http://cfile26.uf.tistory.com/.../227AF6465449F7BE32D767

https://mail.naver.com/file/download/.../?attachType=normal&mailSN=10947&attachIndex=2&virus=1&domain=mail.naver.com&u=cnswon

http://high.software.dn.naver.com/f4b6ad4977ab8009690176bd4ebbf8c8/.../bz4setup.exe

http://afgman.tistory.com/.../cfile28.uf@2322614B562F428D34C6EE.exe

http://low.software.dn.naver.com/f4b6ad4977ab8009690176bd4ebbf8c8/.../bz4setup.exe

http://software.naver.com/api/.../httpDown.nhn?softwareId=MFS_116436|32|MFV_139806&key=7dd98c0d60dc020add58cf5025df3e38ff5eeb89d3a428a70bfe7558d2b50cecb247be70ea382907ced2ee898e596a29d4ee2a81ba77d140906e12438489625c8bd33fd05bf4bfa894ba85f6539477e2b5420bb63a035ba7d8189ce29ed9531633d7ccd971d11cdec7c053a68ad89b136e58f482256e864e460c0b64c59f9d883edf2635091135d82bc2861a644a09c14b3b49641850212ac3b23af57ef6702389aa1305e5bfb2e9af70906566aee856565fce477611a6ceed3cec03932e52e9cebec7fe0135d9920689991fbc59c6263161334b6f7619e9752a7e40c2e4ad71f18d761851ae4575a17b3a637aeb77c3688a36ff55224b64168111b50d9e041f

http://software.naver.com/api/.../httpDown.nhn?softwareId=MFS_116436|32|MFV_139806&key=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

http://www.bkyang.com/.../bz4setup.exe

Scan bz4setup.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.