» crackme_zn15_03.exe
Overview
Analysis
File Details
Downloads (1)

crackme_zn15_03.exe

Kaspersky Lab

File name:

crackme_zn15_03.exe

Publisher:

Kaspersky Lab (signed and verified)

MD5:

fbe94ec9a2d48e132900de928a08a27a

SHA-1:

8c862854915c6cf51f45642541761b6caece4b54

SHA-256:

7611c46911e363301c2e31923ac972c01365e881c07f4012d9aece09b72847e9

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/27/2024 7:11:43 AM UTC (today)

File size:

418.3 KB (428,352 bytes)

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Kaspersky Lab

Authority:

DigiCert Inc

Valid from:

10/27/2014 7:00:00 AM

Valid to:

11/3/2017 7:00:00 PM

Subject:

CN=Kaspersky Lab, O=Kaspersky Lab, L=Moscow, S=Moscow City, C=RU, PostalCode=125212, STREET=39A/3 Leningradskoe shosse, SERIALNUMBER=1027739867473, OID.1.3.6.1.4.1.311.60.2.1.2=Moscow, OID.1.3.6.1.4.1.311.60.2.1.3=RU, OID.2.5.4.15=Private Organization

Issuer:

CN=DigiCert EV Code Signing CA (SHA2), OU=www.digicert.com, O=DigiCert Inc, C=US

Serial number:

0D0C681CE3699DB3F3234F70A5CDD362

File PE Metadata

Compilation timestamp:

11/24/2015 5:02:47 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

1536:uULXLz5QwyeSF/ZH3ypmLw7c/Maew/JkNrhr8nd/2xPYAjTX/xylQgmwFTRBfnkT:uK5ceShRCML+cUVtdr8nd/2l1QRhg

Entry address:

0x8F05

Entry point:

E8, 92, 44, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, 7D, 08, 00, 74, 2D, FF, 75, 08, 6A, 00, FF, 35, 30, 7B, 41, 00, FF, 15, BC, 10, 41, 00, 85, C0, 75, 18, 56, E8, FF, 0B, 00, 00, 8B, F0, FF, 15, A0, 10, 41, 00, 50, E8, AF, 0B, 00, 00, 59, 89, 06, 5E, 5D, C3, 6A, 0C, 68, D0, 48, 41, 00, E8, 2B, 0F, 00, 00, 6A, 0E, E8, 66, 02, 00, 00, 59, 83, 65, FC, 00, 8B, 75, 08, 8B, 4E, 04, 85, C9, 74, 2F, A1, 34, 6F, 41, 00, BA, 30, 6F, 41, 00, 89, 45, E4, 85, C0, 74, 11, 39, 08, 75, 2C, 8B, 48, 04, 89, 4A... 
[+]

Entropy:

5.3352

Code size:

62.5 KB (64,000 bytes)

The file crackme_zn15_03.exe has been seen being distributed by the following URL.

http://www.kaspersky.ru/.../static2/.../crackme_zn15_03.exe

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.