» kof_patcher.exe
Overview
Analysis
File Details

kof_patcher.exe

DFUFG Application

DRAGONFLY GF CO., LTD.

File name:

kof_patcher.exe

Publisher:

Dragonfly Co. Ltd. (signed by DRAGONFLY GF CO., LTD.)

Product:

DFUFG Application

Version:

2.3.0.2

MD5:

432849ef8da8ffbcac449b28b0014f15

SHA-1:

682ff405f59e5a0e01122ac5fbc235f7ed0bb84e

SHA-256:

0bc196b1e833c2c5ca33945d18ba258a625ae412cb0c86fe07a351eace5db75b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/25/2024 8:19:23 PM UTC (today)

File size:

4.5 MB (4,715,072 bytes)

Product version:

2.3.0.2

Original file name:

DFUFG.exe

File type:

Executable application (Win32 EXE)

Language:

Korean (Korea)

Digital Signature

Signed by:

DRAGONFLY GF CO., LTD.

Authority:

Thawte, Inc.

Valid from:

7/11/2012 7:00:00 AM

Valid to:

7/12/2014 6:59:59 AM

Subject:

CN="DRAGONFLY GF CO., LTD.", OU=SYSTEM Team, O="DRAGONFLY GF CO., LTD.", L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

080B32179220E78B9CC1F6F2CDFB90F7

File PE Metadata

Compilation timestamp:

10/4/2013 2:23:37 PM

OS version:

5.1

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

10.0

CTPH (ssdeep):

98304:IGmU0X5n6bbqp5xj9uay5bDJwfyQ9bmgI5Tic:IGmuYnqD09bmgI5TZ

Entry address:

0x13E39E

Entry point:

E8, 55, AA, 00, 00, E9, 89, FE, FF, FF, 3B, 0D, B0, 04, 5D, 00, 75, 02, F3, C3, E9, DC, AA, 00, 00, 8B, FF, 51, C7, 01, 88, FF, 59, 00, E8, D4, AB, 00, 00, 59, C3, 8B, FF, 55, 8B, EC, 56, 8B, F1, E8, E3, FF, FF, FF, F6, 45, 08, 01, 74, 07, 56, E8, 45, 0C, F0, FF, 59, 8B, C6, 5E, 5D, C2, 04, 00, 8B, FF, 55, 8B, EC, 8B, 45, 08, 83, C1, 09, 51, 83, C0, 09, 50, E8, 13, AC, 00, 00, F7, D8, 59, 1B, C0, 59, 40, 5D, C2, 04, 00, 6A, 10, 68, D0, 29, 5C, 00, E8, 6C, 65, 00, 00, 33, C0, 89, 45, E0, 89, 45, FC, 89, 45... 
[+]

Entropy:

6.4454

Code size:

1.4 MB (1,520,128 bytes)

Scan kof_patcher.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.