home

Gmarket.exe

Gmarket

eBay Korea Co., Ltd

Publisher:
eBay Korea Co., Ltd  (signed and verified)

Product:
Gmarket

Version:
1.0.0.0

MD5:
4518b618c0dba235dfa05e58c27a5ced

SHA-1:
671be03497aca8997718fd7a1d6651b9078ca744

SHA-256:
36a27b7e8040ab3c3fc36bdeee7f6c1cc10aeafdb0829da03615817dea154f3d

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
7/15/2025 7:09:12 AM UTC  (today)

File size:
109.5 KB (112,128 bytes)

Product version:
1.0.0.0

Copyright:
Copyright © 2015

Original file name:
Gmarket.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\gmarket.exe

Digital Signature
Signed by:
eBay Korea Co., Ltd

Authority:
Symantec Corporation

Valid from:
3/3/2015 7:00:00 PM

Valid to:
5/2/2017 7:59:59 PM

Subject:
CN="eBay Korea Co., Ltd", O="eBay Korea Co., Ltd", L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Symantec Class 3 SHA256 Code Signing CA, OU=Symantec Trust Network, O=Symantec Corporation, C=US

Serial number:
27A4737C8F872C833870B41D4F008598

File PE Metadata
Compilation timestamp:
4/24/2015 1:24:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
768:14imMuSOe32h4ftAYjcAumssnJRy8FnSZd:pmMuSDmCVJYA9VFsd

Entry address:
0x1C31E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
3.7680

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
105 KB (107,520 bytes)

The file Gmarket.exe has been seen being distributed by the following 3 URLs.

http://sna.gmarket.co.kr/?cc=CHM1A020&url=http://doc.gmarket.co.kr/.../Gmarket.exe

http://doc.gmarket.co.kr/.../Gmarket.exe

http://sna.gmarket.co.kr/?cc=CHD0A019&url=http://doc.gmarket.co.kr/.../Gmarket.exe

Scan Gmarket.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.