crack for 3d.exe

The executable crack for 3d.exe has been detected as malware by 23 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from downloader.disk.yandex.ua and multiple other hosts.
MD5:
1ad53c4d7211a8a99029cba253857fb3

SHA-1:
41c627dc57233ab0bd2e2344f6f3007291de0c78

SHA-256:
7f0513835789987bd0352e0c5f43e80dd9a70041a9480271a089351535f1fcf8

Scanner detections:
23 / 68

Status:
Malware

Analysis date:
4/26/2024 4:16:36 PM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.Generic.7420756
1017

Avira AntiVirus
TR/Vundo.Gen
7.11.144.160

AVG
Generic30
2015.0.3495

Bitdefender
Trojan.Generic.7420756
1.0.20.570

Bkav FE
W32.Clod206.Trojan
1.3.0.4959

Clam AntiVirus
Win.Trojan.Vundo-21113
0.98/18355

Comodo Security
UnclassifiedMalware
18142

Emsisoft Anti-Malware
Trojan.Generic.7420756
8.14.04.24.08

Fortinet FortiGate
W32/SPNR.08CH12!tr
4/24/2014

F-Secure
Trojan.Generic.7420756
11.2014-24-04_5

G Data
Trojan.Generic.7420756
14.4.24

IKARUS anti.virus
Trojan.SuspectCRC
t3scan.1.6.1.0

McAfee
RDN/Vundo!db
5600.7151

MicroWorld eScan
Trojan.Generic.7420756
15.0.0.342

NANO AntiVirus
Trojan.Win32.Vundo.cfjdql
0.28.0.59492

Norman
Suspicious_Gen4.YXBE
11.20140424

nProtect
Trojan.Generic.7420756
14.04.21.01

Panda Antivirus
Generic Malware
14.04.24.08

Rising Antivirus
PE:Trojan.Win32.Generic.15214772!354502514
23.00.65.14422

Sophos
Mal/Generic-L
4.98

Trend Micro House Call
TROJ_SPNR.08CH12
7.2.114

Trend Micro
TROJ_SPNR.08CH12
10.465.24

VIPRE Antivirus
Trojan.Win32.Generic
28468

File size:
19 KB (19,456 bytes)

File type:
Executable application (Win32 EXE)

File PE Metadata
Compilation timestamp:
1/25/2012 5:44:43 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
5.12

CTPH (ssdeep):
384:cQjcx7coJts8OJ9LSnbY/NF2YN81J34qtEDJ+YZQU0mIh:cQwx7cqtIenc/NFU1J34gEljqpB

Entry address:
0x1000

Entry point:
6A, 00, E8, 37, 01, 00, 00, A3, 30, 60, 40, 00, 6A, 00, 68, 28, 10, 40, 00, 6A, 00, 6A, 65, FF, 35, 30, 60, 40, 00, E8, FE, 00, 00, 00, 50, E8, 10, 01, 00, 00, 55, 8B, EC, 81, 7D, 0C, 11, 01, 00, 00, 75, 7B, 83, 7D, 10, 01, 75, 63, 6A, 64, 68, 34, 60, 40, 00, 68, E9, 03, 00, 00, FF, 75, 08, E8, DE, 00, 00, 00, 8D, 05, 34, 60, 40, 00, 80, 38, 2D, 74, 03, 40, EB, F8, 40, C6, 40, 09, 00, 50, E8, 5E, 00, 00, 00, 6A, 00, 6A, 00, 6A, 00, 6A, 00, 6A, 00, 6A, 00, 50, 68, 00, 60, 40, 00, 68, 18, 60, 40, 00, 68, 65...
 
[+]

Packer / compiler:
TASM / MASM

Code size:
16 KB (16,384 bytes)

The file crack for 3d.exe has been seen being distributed by the following 6 URLs.

https://downloader.disk.yandex.ua/disk/eb38b88916295a06021c7cb0139e2fa67c39021dec5722226c69cf27bde6a8e9/582ecefb/imIZsbKLtWw_gF7b53yrqpdeirWj3rJRGIDthPvEbmgN9W9ctwJOWIrY-zwkNM2kaGVMHYxNICeYfhcY-7DO4A==?uid=0&filename=keygen.exe&disposition=attachment&hash=FpGoILj7jjEgRPEwcHhKWClkotEIOUM/.../x-msdownload&fsize=19456&hid=08e135bbc556f1318aa1ec59d676a250&media_type=executable&tknv=v2

https://downloader.disk.yandex.ua/disk/d105070dd30c176e1c673a035f8256e9977ff884afc0608ddbfed5fa092b5e60/583b2914/.../x-msdownload&fsize=19456&hid=08e135bbc556f1318aa1ec59d676a250&media_type=executable&tknv=v2

Remove crack for 3d.exe - Powered by Reason Core Security