home

ccd.mod.installer.by.---max---_v1.4.0.0.exe

Description:
City Car Driving Mod Installer by ---Max---

Version:
1.4.0

MD5:
8d0d0557c8cbbc0aa9e708438e3698c6

SHA-1:
5903c714795b6e1e10db14ac05d5098457502a0d

SHA-256:
8e942df6771f826e7ce47d9182a96324ae5c1844ddc7bef01f84a97846f251bc

Scanner detections:
3 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
5/4/2024 5:16:33 AM UTC  (today)

Scan engine
Detection
Engine version

IKARUS anti.virus
Trojan.AIT.AutoIT
t3scan.1.9.2.0

Norman
Suspicious_Gen5.BFOXS
11.20150531

Rising Antivirus
PE:Trojan.Win32.Injector.fw!1075357566
23.00.65.15529

File size:
1.4 MB (1,511,424 bytes)

Product version:
1.0.0

Copyright:
---Max---

File type:
Executable application (Win32 EXE)

Language:
Russian (Russia)

Common path:
C:\users\{user}\downloads\ccd.mod.installer.by.---max---_v1.4.0.0.exe

File PE Metadata
Compilation timestamp:
12/11/2014 7:51:49 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

CTPH (ssdeep):
24576:ctb20pkaCqT5TBWgNQ7axVfeCG9J6P0awCuKx6A:FVg5tQ7aTWzJ6xwm5

Entry address:
0x25F74

Entry point:
E8, 6A, CE, 00, 00, E9, 7F, FE, FF, FF, CC, CC, 57, 56, 8B, 74, 24, 10, 8B, 4C, 24, 14, 8B, 7C, 24, 0C, 8B, C1, 8B, D1, 03, C6, 3B, FE, 76, 08, 3B, F8, 0F, 82, 68, 03, 00, 00, 0F, BA, 25, 58, 01, 4C, 00, 01, 73, 07, F3, A4, E9, 17, 03, 00, 00, 81, F9, 80, 00, 00, 00, 0F, 82, CE, 01, 00, 00, 8B, C7, 33, C6, A9, 0F, 00, 00, 00, 75, 0E, 0F, BA, 25, 70, A3, 4B, 00, 01, 0F, 82, DA, 04, 00, 00, 0F, BA, 25, 58, 01, 4C, 00, 00, 0F, 83, A7, 01, 00, 00, F7, C7, 03, 00, 00, 00, 0F, 85, B8, 01, 00, 00, F7, C6, 03, 00...
 
[+]

Entropy:
7.0417

Code size:
557.5 KB (570,880 bytes)

The file ccd.mod.installer.by.---max---_v1.4.0.0.exe has been seen being distributed by the following 6 URLs.

http://s7755.minhateca.com.br/File.aspx?e=DZ74YWDMg7hGLVsRK9ZnSBxNez-VcpoAD2JIjSMjO25hzjE8xB4YPur97iZlQhLlmSr7QLrXW-dAJIARv7F9-vjEIyEyX84-wtwy1rpqLgxXDP5BqpROvve8ME-9V4Z-094xO1QVdrnIpyMpa8DfBhCmTFy0TgnHSjXx_WRSBxnPY03WZQ7YSOVzkvoNagiV&pv=2

https://downloader.disk.yandex.com/disk/7022c79078a21e64fc3a634ec6bb74c526abad1c766267be785cdf91b0c5b9a5/55187d6b/.../x-msdownload&fsize=1511424&hid=9a380a12ae63caf3f59d958e4cb43ab7&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/b19d1dfb7bb3aba5feeeaf10a088d1b946fe74b9d748319c4a2fbc4e0e6e2a78/56410247/.../x-msdownload&fsize=1511424&hid=9a380a12ae63caf3f59d958e4cb43ab7&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/b5999ff06a17589df797544cfef360e2c91a987dd7ba88f7ea9e04451718173b/56340f0c/.../x-msdownload&fsize=1511424&hid=9a380a12ae63caf3f59d958e4cb43ab7&media_type=executable&tknv=v2

https://downloader.disk.yandex.com/disk/dfefcfabd5fdc68e6ffabfea4f5f6ffe13a379ef83b53e714b404e1c1dcfa250/55b3d847/.../x-msdownload&fsize=1511424&hid=9a380a12ae63caf3f59d958e4cb43ab7&media_type=executable&tknv=v2

https://downloader.disk.yandex.ua/disk/1673646317baf7eb72255f463beeae60c2a5f20fc4bb044e5e1ac334c79cd764/560ff6bd/AdsZlHAKUrpAV8bUmC86qLYpZk782dkdm6uQJ0Ktm5HiISkJ-cRJd-UnZyyP9c-I6P0N53laGCTFkIYRUbsIaw==?uid=0&filename=CCD.Mod.Installer.by.---Max---_v1.4.0.0.exe&disposition=attachment&hash=d56MzZTyLyLeq/DLexP/7A5IYMFfiFFvS7o3WNVC1/.../x-msdownload&fsize=1511424&hid=9a380a12ae63caf3f59d958e4cb43ab7&media_type=executable&tknv=v2

Scan ccd.mod.installer.by.---max---_v1.4.0.0.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.