hack para crossfire 2016.exe

The executable hack para crossfire 2016.exe has been detected as malware by 18 anti-virus scanners. This is a setup program which is used to install the application. The file has been seen being downloaded from fs04n4.sendspace.com.
Version:
1.0.0.0

MD5:
9459a5440f14e8c2300b169bb71ace51

SHA-1:
445bcff42eeedd66af184947b9c4e56814a72351

SHA-256:
fcde6c927e255cf0af35c27e67778e3412bf78357895a0bed60a4ecf93ef8d12

Scanner detections:
18 / 68

Status:
Malware

Analysis date:
12/10/2018 2:09:46 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Gen:Variant.Kazy.570500
265

AegisLab AV Signature
Troj.W32.Gen.lV31
2.1.4+

Avira AntiVirus
TR/Inject.sbbeiko
8.3.3.4

Arcabit
Trojan.Kazy.D8B484
1.0.0.680

AVG
MSIL8
2017.0.2743

Baidu Antivirus
MSIL.Trojan.Injector
4.0.3.16514

Bitdefender
Gen:Variant.Kazy.570500
1.0.20.675

Dr.Web
Trojan.DownLoader12.46082
9.0.1.0135

Emsisoft Anti-Malware
Gen:Variant.Kazy.570500
8.16.05.14.07

ESET NOD32
MSIL/Injector.IKV (variant)
10.13487

Fortinet FortiGate
MSIL/Injector.IFP!tr
5/14/2016

F-Secure
Gen:Variant.Kazy.570500
11.2016-14-05_7

G Data
Gen:Variant.Kazy.570500
16.5.25

Malwarebytes
Trojan.PasswordStealer
v2016.05.14.07

Microsoft Security Essentials
Trojan:MSIL/Nagoot.A
1.1.12706.0

MicroWorld eScan
Gen:Variant.Kazy.570500
17.0.0.405

Qihoo 360 Security
QVM03.0.Malware.Gen
1.0.0.1120

Sophos
Troj/MSIL-EBL
4.98

File size:
67 KB (68,608 bytes)

Product version:
1.0.0.0

Original file name:
hack para crossfire 2016.exe

File type:
Executable application (Win32 EXE)

Language:
Language Neutral

Common path:
C:\users\{user}\downloads\hack para crossfire 2016.exe

File PE Metadata
Compilation timestamp:
5/13/2016 11:41:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
1536:68h4YFU3l9+3LjokzNYB+fXglMo59bARD+e31:68tAoLjo+xglVTURKe31

Entry address:
0x122EE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
65 KB (66,560 bytes)

The file hack para crossfire 2016.exe has been seen being distributed by the following URL.

Remove hack para crossfire 2016.exe - Powered by Reason Core Security