Malware scan of psemu3_setup.exe ba874a9d6eef9725f59abfcea6b4f3ded75e8458

File name:

psemu3_setup.exe

MD5:

93f1ec6fdae1be33da09f7e74b0d73e3

SHA-1:

ba874a9d6eef9725f59abfcea6b4f3ded75e8458

SHA-256:

bc8059b77a1f57b76209b61ad2ddd9e2b629026ffa61e6ea117037604afbc675

Scanner detections:

20 / 68

Status:

Potentially unwanted

Analysis date:

4/25/2024 6:11:32 AM UTC (today)

Scan engine

Detection

Engine version

Lavasoft Ad-Aware

Trojan.GenericKD.1996722

765

Agnitum Outpost

Hoax.Agent

7.1.1

Avira AntiVirus

APPL/Somoto.4887933

7.11.198.230

Baidu Antivirus

Trojan.MSIL.Agent

4.0.3.141231

Bitdefender

Trojan.GenericKD.1996722

1.0.20.1825

Comodo Security

UnclassifiedMalware

20547

Emsisoft Anti-Malware

Trojan.GenericKD.1996722

8.14.12.31.08

ESET NOD32

Win32/Somoto

8.10950

F-Secure

Trojan.GenericKD.1996722

11.2014-31-12_4

G Data

Trojan.GenericKD.1996722

14.12.24

K7 AntiVirus

Trojan

13.188.14496

Kaspersky

HEUR:Trojan.Win32.Generic

14.0.0.2711

McAfee

Artemis!93F1EC6FDAE1

5600.6899

Norman

Troj_Generic.XUBCO

11.20141231

nProtect

Trojan.GenericKD.1996722

14.12.31.01

Qihoo 360 Security

HEUR/QVM42.0.Malware.Gen

1.0.0.1015

Rising Antivirus

PE:Trojan.Win32.Generic.17DC6B9A!400321434

23.00.65.141229

Sophos

Generic PUA HF

4.98

Trend Micro House Call

Suspicious_GEN.F47V1220

7.2.365

VIPRE Antivirus

Trojan.Win32.Generic

36264

File size:

4.7 MB (4,887,933 bytes)

File type:

Executable application (Win32 EXE)

Installer:

NSIS (Nullsoft Scriptable Install System)

Compilation timestamp:

12/25/2013 6:01:41 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

6.0

CTPH (ssdeep):

98304:FUbtoZoYG6CYn3cd23d1vPD2YfcmnAwQZq+6b/Ho0G0+yhtVxA55En0S9WQ:PKT6JnJvrrcmnAAzL+K25JS9WQ

Entry address:

0x30E4

Entry point:

81, EC, 84, 01, 00, 00, 53, 55, 56, 33, DB, 57, 89, 5C, 24, 18, C7, 44, 24, 10, 90, 91, 40, 00, 89, 5C, 24, 20, C6, 44, 24, 14, 20, FF, 15, 34, 70, 40, 00, 68, 01, 80, 00, 00, FF, 15, 1C, 71, 40, 00, 53, FF, 15, 8C, 72, 40, 00, 6A, 08, A3, 58, E4, 42, 00, E8, 95, 2D, 00, 00, A3, A4, E3, 42, 00, 53, 8D, 44, 24, 38, 68, 60, 01, 00, 00, 50, 53, 68, E0, 87, 42, 00, FF, 15, 64, 71, 40, 00, 68, 80, 91, 40, 00, 68, A0, DB, 42, 00, E8, 3F, 2A, 00, 00, FF, 15, 20, 71, 40, 00, BD, 00, 40, 43, 00, 50, 55, E8, 2D, 2A... 
[+]

Packer / compiler:

Nullsoft install system v2.x

Code size:

23.5 KB (24,064 bytes)

The file psemu3_setup.exe has been seen being distributed by the following 28 URLs.

https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/.../0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&nonce=6jjaiej674qsk&user=17310803258626386401&hash=4ecejl8lf2vat68knqld2ce2tdh7m98o

https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/17310803258626386401/0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5&urp=http://.../ps3-emulator-downl&pli=1

https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/17310803258626386401/0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5&urp=http://.../ps3-emulator-downl&pli=1&auth=DQAAAOkAAABe5qOi8PfdHtUiN2ABt1WckCSqp1ZSbdQMMYDweNAnUkt9c4zV1nJVSY3cKBS5jL46H34GIKmDXQyfX4m87AdcT3DvvKzp6bwQTXmSX1T1wIwh0vrUaR0WcpQxQyXr5_a-Hg6o-GtHB2hZbVag2-UFcZGdKpxs5kKqrpv8TF2MNRDcOYZQRlrbHt5a-yCbGRVTXJs9BZmWIJsO8h4IF1Grj7rmXJgDIyOEd2KmRtPLpRTpDY4HkoYcCpOESkpfe3fFbBpo5ahKnPpDW0C_Fh5VuZ2Jh3GH5MOKST2Ilz7GWcZCEIjg5tUM6d9zM3um9v8&authuser=0

https://accounts.google.com/ServiceLogin?service=writely&passive=1209600&continue=https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/17310803258626386401/0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5&urp=http://.../ps3-emulator-downl&followup=https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/17310803258626386401/0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5&urp=http://.../ps3-emulator-downl&ltmpl=homepage&emr=1&authuser=0

https://www.google.com/accounts/ServiceLogin?service=writely&passive=1209600&continue=https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/17310803258626386401/0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5&urp=http://.../ps3-emulator-downl&followup=https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/17310803258626386401/0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5&urp=http://.../ps3-emulator-downl&ltmpl=homepage&emr=1&authuser=0

https://docs.google.com/nonceSigner?nonce=6jjaiej674qsk&continue=https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/.../0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download&hash=d3a27pv2rei5obj29n5dfgqa705cobn5

https://doc-0s-3c-docs.googleusercontent.com/docs/securesc/ejeeuqvgiigcljkdvtmag9bbpqq346q2/trg8fvfvtjoaovf90hnncvvllqpvbon5/1421683200000/02389099468332117340/.../0BwElGBuh7RFGTXRuZ013WUI3Mm8?e=download