home

_ecb191d0a871ea72b8e410.exe

MD5:
34593b737fa6c803c39cc3aff18436dd

SHA-1:
b9555f6b7745c4e5fca459a70fcc85ebeca35d48

SHA-256:
5eeea8fac618abd6b1d2412b95f4b7a4013d7900812fc2baa2c3145383c32c11

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/26/2024 6:49:43 PM UTC  (today)

File size:
130.8 KB (133,982 bytes)

File type:
Executable application (Win16 EXE)

Common path:
C:\users\{user}\downloads\_ecb191d0a871ea72b8e410.exe

File PE Metadata
OS bitness:
Win16

Linker version:
180.0

CTPH (ssdeep):
384:CA/yGFPMNBfxF2222222JNCRxvhgGBXhPQIIIII/GIIIIIInk:CA/yGFPMNBfxF2222222JUR5hF+k

Entry point:
00, 00, 01, 00, 01, 00, B4, B4, 00, 00, 01, 00, 20, 00, 48, 0B, 02, 00, 16, 00, 00, 00, 28, 00, 00, 00, B4, 00, 00, 00, 68, 01, 00, 00, 01, 00, 20, 00, 00, 00, 00, 00, 00, 00, 00, 00, 13, 0B, 00, 00, 13, 0B, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.5191

Code size:
22.5 MB (23,592,960 bytes)

The file _ecb191d0a871ea72b8e410.exe has been seen being distributed by the following URL.

http://download.mail.naver.com/file/download/.../?mailSN=11992&attachIndex=2&virus=1&domain=mail.naver.com&u=padawa

Scan _ecb191d0a871ea72b8e410.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.