» messenger_bsms_7009.exe
Overview
Analysis
File Details
Downloads (1)

messenger_bsms_7009.exe

BulkSMS Desktop Messenger

Celerity Systems (Pty) Ltd

This is a setup and installation application. The file has been seen being downloaded from messenger.bulksms.com.

File name:

Publisher:

Celerity Systems (Pty) Ltd

Product:

BulkSMS Desktop Messenger

Description:

This setup installs the BulkSMS Desktop Messenger

Version:

7.0.9

MD5:

ec6e9cd1a7201880a3f6bf91f0862037

SHA-1:

ed6eb2816e4c8ec65b5a869965a0239be4fe2f16

SHA-256:

0dff0858cf6f53b476d8825135d659e08b2bde6fad84dc70367160d8ecd33fdf

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/31/2024 7:57:06 AM UTC (today)

File size:

8 MB (8,420,824 bytes)

Product version:

7.0.9

Original file name:

Setup.exe

File type:

Executable application (Win32 EXE)

Language:

English (United States)

Common path:

C:\users\{user}\downloads\messenger_bsms_7009.exe

File PE Metadata

Compilation timestamp:

9/22/2009 10:29:30 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

196608:JbS4efE1S0PBO8p5bq4orKPKMmCNflmbq3Yi2/+rDtRIfdb:kfE1S/4oaKbCB8m352+tRIfx

Entry address:

0x56683

Entry point:

0F, AF, D5, F3, 10, D3, 4B, C7, C7, 18, 41, FB, 71, 81, DD, A5, B7, AF, D2, F2, 3B, CB, 8D, 35, 63, 09, D6, C5, 81, FF, 67, 87, 71, 2D, C7, C5, 2C, 39, 67, 9A, 88, DE, 70, 04, B6, C3, 8B, E9, 8B, F3, 8B, D3, 0F, BF, FE, 38, F1, 0F, BF, EE, 47, 8B, DE, 42, 85, FF, 70, 08, 69, D1, 62, EB, C8, 00, 33, EB, 2B, C3, 89, FD, C6, C6, 30, 88, D7, FF, CE, 0F, B6, CF, 80, E6, 13, 8A, D1, 71, 05, F3, 80, C2, 5E, F3, 85, EE, 73, 02, 87, F7, E8, 8B, 00, 00, 00, 0F, AF, C8, 85, C5, 42, 86, F0, 8D, 0D, C4, 02, AF, C2, 81... 
[+]

Entropy:

7.9608 (probably packed)

Code size:

465.5 KB (476,672 bytes)

The file messenger_bsms_7009.exe has been seen being distributed by the following URL.

http://messenger.bulksms.com/.../messenger_bsms_7009.exe

Scan messenger_bsms_7009.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.