» patcher_1.exe
Overview
Analysis
File Details

patcher_1.exe

Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin

File name:

patcher_1.exe

Publisher:

Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin (signed and verified)

MD5:

beee6f3a33af308800723323bfb0b757

SHA-1:

24d2702b06fcc56f1ba836ff5cd1e052ddb125dc

SHA-256:

571a69471caf82ab97cbeb90382ec76d98183af609649ea23bb604e7a6d7ef3e

Scanner detections:

3 / 68

Status:

Clean (3 probable false positive detections)

Explanation:

These detections are probably false positives (erroneous), the file is probably malware free.

Analysis date:

4/20/2024 3:22:52 AM UTC (today)

Scan engine

Detection

Engine version

Trend Micro House Call

PAK_Generic.001

7.2.13

Trend Micro

PAK_Generic.001

10.465.13

Vba32 AntiVirus

suspected of Trojan.Downloader.gen.h

3.12.26.4

File size:

108.8 KB (111,392 bytes)

File type:

Executable application (Win32 EXE)

Digital Signature

Signed by:

Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin

Authority:

VeriSign, Inc.

Valid from:

7/25/2011 7:00:00 AM

Valid to:

7/26/2013 6:59:59 AM

Subject:

CN=Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin, OU=Digital ID Class 3 - Microsoft Software Validation v2, O=Cong Ty Dau Tu Va Phat Trien Cong Nghe Thong Tin, L=Hanoi, S=Hanoi, C=VN

Issuer:

CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:

1163AFD815645B4622FAC27B357AE85B

File PE Metadata

Compilation timestamp:

4/4/2012 7:12:19 PM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

3072:rDEqkgMyG0MGkpI+QmcvJdeR/NBXTvNb1rFV6oQNM0AHJqAD6CLG8q7R:rDDNG0M0XmKJs/NlrfZ8Af5w

Entry address:

0x1674B

Entry point:

B8, C8, F8, 43, 00, 50, 64, FF, 35, 00, 00, 00, 00, 64, 89, 25, 00, 00, 00, 00, 33, C0, 89, 08, 50, 45, 43, 6F, 6D, 70, 61, 63, 74, 32, 00, CF, 19, C6, 94, 48, 51, 41, 21, C8, 9F, CA, B4, 4F, B2, 21, 80, 99, F7, 0F, 51, FE, C6, 04, 0E, 01, E1, EC, 7A, 1E, EB, F5, E4, 85, CE, F5, DF, D5, DF, 04, A7, CE, 93, B1, E7, 4F, 22, EE, 13, CE, 26, 71, 31, CE, CB, A0, B1, A6, 19, 7F, 1A, 33, 8C, EC, E9, 3B, CA, 5E, 33, 06, 2B, 44, AB, 13, EA, E2, 44, 99, 57, 5D, 0B, C7, 3E, 53, 84, 6C, F0, A5, BC, CB, BC, E2, 4C, 7B... 
[+]

Entropy:

7.8824

Packer / compiler:

PECompact v2

Code size:

160 KB (163,840 bytes)

Scan patcher_1.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.