» sframe.exe
Overview
Analysis
File Details

sframe.exe

Gala Lab Corp.

File name:

sframe.exe

Publisher:

Gala Lab Corp. (signed and verified)

MD5:

14c796642d0bb0911abc34c028711a28

SHA-1:

0a38052baa1249efbe0c57490657f5c528cf2339

SHA-256:

fd5304eccf0cbdc77938a8a43adeeaf2b1c78d84dfa1087f80a27761f7751f3b

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/26/2024 9:25:28 AM UTC (today)

File size:

4 MB (4,200,592 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\windows\syswow64\sframe.exe

Digital Signature

Signed by:

Gala Lab Corp.

Authority:

Thawte, Inc.

Valid from:

8/22/2012 6:00:00 PM

Valid to:

8/23/2014 5:59:59 PM

Subject:

CN=Gala Lab Corp., OU=Tech Support Headquarters, O=Gala Lab Corp., L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0DF9EE3CFBC6D8DEE0777F9263CE06DF

File PE Metadata

Compilation timestamp:

12/3/2012 2:21:26 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:6sKzlWsiZNuu7Hs1wNAb7FCwNnXTVv4lEViO1Mz:6rljiXwzb7bnDRcEV6z

Entry address:

0x1000

Entry point:

68, 01, 30, E3, 00, E8, 01, 00, 00, 00, C3, C3, 52, 88, 8D, BC, 4F, 9D, DA, E9, 67, 02, CB, CF, 92, A0, B0, C4, 94, E4, 6B, 1E, 2D, 86, 69, 61, 83, 59, 32, 26, 0F, C0, 9A, A2, 85, 6C, 64, EC, 9D, CD, 5E, 6A, 63, 31, 5C, 55, CB, 73, 9A, EB, CD, 0B, 57, AE, AA, FF, 8E, 7F, A6, 6F, 2A, 4A, 96, 18, 14, AA, A7, A3, 1C, 8D, 49, 17, F2, 4C, 7F, 9B, 87, BD, 47, 85, 88, AA, 5A, 54, 7E, 13, 55, 45, 2C, 52, 08, F6, 42, 31, 1E, AA, C3, 76, 23, 1A, 70, 7A, 95, EB, CB, E8, 24, B9, 16, B9, 14, BA, 64, 46, EF, 7C, 93, 97... 
[+]

Entropy:

7.9348

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

6.7 MB (7,012,352 bytes)

Scan sframe.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.