home

maat 1.2.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from download1197.mediafire.com and multiple other hosts.
MD5:
eb5e08170e1833bea7a53a9e384afee8

SHA-1:
6a3972e29d9097e46b3e5be2b699e8dbc07db729

SHA-256:
1e9996b9cc345cc2adefd68aa85eec79acda2b6a9a21842cb740cfc9ad9a0e27

Scanner detections:
5 / 68

Status:
Inconclusive  (not enough data for an accurate detection)

Analysis date:
4/25/2024 3:32:13 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Malware-gen
2014.9-150331

Fortinet FortiGate
Android/DrdDream.BE!exploit
3/31/2015

McAfee
Artemis!06D429630BFD
5600.6810

Norman
Suspicious_Gen4.HLYCM
11.20150331

Panda Antivirus
Trj/CI.A
15.03.31.08

File size:
116.7 MB (122,365,110 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\programs\maat 1.2.exe

File PE Metadata
Compilation timestamp:
4/21/2008 6:55:00 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.50

CTPH (ssdeep):
3145728:XYt56T38Biek6EuJdc7Kn3++C6XaQcif8jyynBRlK1j5eMD:XU8J6/v3+CXaZifKyyBRlkj5eMD

Entry address:
0x436D0

Entry point:
60, BE, 15, E0, 42, 00, 8D, BE, EB, 2F, FD, FF, 57, EB, 0B, 90, 8A, 06, 46, 88, 07, 47, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 72, ED, B8, 01, 00, 00, 00, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C0, 01, DB, 73, EF, 75, 09, 8B, 1E, 83, EE, FC, 11, DB, 73, E4, 31, C9, 83, E8, 03, 72, 0D, C1, E0, 08, 8A, 06, 46, 83, F0, FF, 74, 74, 89, C5, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB, 11, C9, 75, 20, 41, 01, DB, 75, 07, 8B, 1E, 83, EE, FC, 11, DB...
 
[+]

Entropy:
7.9972

Packer / compiler:
UPX v0.89.6 - v1.02 / v1.05 -v1.24

Code size:
88 KB (90,112 bytes)

The file maat 1.2.exe has been seen being distributed by the following 24 URLs.

http://download1197.mediafire.com/mxpenkq6t08g/.../Maat 1.2.exe

http://download673.mediafire.com/hf5qgpa1k3cg/.../Maat 1.2.exe

http://download1804.mediafire.com/mp8s9mgpm6fg/.../Maat 1.2.exe

http://download1471.mediafire.com/fb0v70bcw4lg/.../Maat 1.2.exe

http://download1618.mediafire.com/j4tstf9bfnng/.../Maat 1.2.exe

http://download1864.mediafire.com/z2n6dm23rrng/.../Maat 1.2.exe

http://download2070.mediafire.com/5jv2b7g39jig/.../Maat 1.2.exe

http://dc612.4shared.com/download/.../Maat_12.exe

http://download649.mediafire.com/h9c5pz88865g/.../Maat 1.2.exe

http://download1994.mediafire.com/2a3s896mpteg/.../Maat 1.2.exe

http://download720.mediafire.com/mah98836z1yg/.../Maat 1.2.exe

http://download2108.mediafire.com/n1bsh9oykyxg/.../Maat 1.2.exe

http://download2145.mediafire.com/lilczkmxy5tg/.../Maat 1.2.exe

http://download1102.mediafire.com/1oml6j7u7feg/.../Maat 1.2.exe

http://dc596.4shared.com/download/.../Maat_12.exe

http://download2155.mediafire.com/18cu39cpthwg/.../Maat 1.2.exe

http://download638.mediafire.com/w534r2fbpuhg/.../Maat 1.2.exe

http://download767.mediafire.com/13mydu9y4stg/.../Maat 1.2.exe

https://mega.nz/persistent/.../EZ9HXYIb

http://download1660.mediafire.com/3nq1mg3b5yjg/.../Maat 1.2.exe

http://download1997.mediafire.com/iir81s8q54wg/.../Maat 1.2.exe

http://download1738.mediafire.com/ugczps94x9kg/.../Maat 1.2.exe

https://mega.nz/temporary/.../EZ9HXYIb

http://download2122.mediafire.com/4cu9riw111jg/.../Maat 1.2.exe

Scan maat 1.2.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.