» sframe.exe
Overview
Analysis
File Details

sframe.exe

Gala Lab Corp.

File name:

sframe.exe

Publisher:

Gala Lab Corp. (signed and verified)

MD5:

0c9e968ba1f43074f094400441c5ba10

SHA-1:

e4129080a19d90781dfe3f3a8e43f140dde6ccd2

SHA-256:

d254bc9aa582e8ec20f0850e9ba73646ed15b5fe911ea32309ba55061d8a46b7

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

4/23/2024 9:41:23 PM UTC (today)

File size:

3.9 MB (4,094,096 bytes)

File type:

Executable application (Win32 EXE)

Common path:

C:\Program Files\gpotato.eu\rappelz\sframe.exe

Digital Signature

Signed by:

Gala Lab Corp.

Authority:

Thawte, Inc.

Valid from:

8/23/2012 2:00:00 AM

Valid to:

8/24/2014 1:59:59 AM

Subject:

CN=Gala Lab Corp., OU=Tech Support Headquarters, O=Gala Lab Corp., L=Gangnam-gu, S=Seoul, C=KR

Issuer:

CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:

0DF9EE3CFBC6D8DEE0777F9263CE06DF

File PE Metadata

Compilation timestamp:

10/10/2012 10:56:21 AM

OS version:

4.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

8.0

CTPH (ssdeep):

98304:ID3mU/PFPM4QCw/TI8YFaaGg4lEViO1b1:IrPVfkgcEVJ1

Entry address:

0x1000

Entry point:

68, 01, 90, DD, 00, E8, 01, 00, 00, 00, C3, C3, 5A, B6, 34, 9F, A4, 0D, 4F, 5C, 38, F4, 8E, D8, E1, 93, 41, 6A, 6E, 65, 16, 00, 37, CE, 2B, B8, 1B, C7, 91, AD, 2E, A0, A9, 97, AB, 41, 6A, 08, B2, 44, 99, 0E, 68, D3, 40, F6, 8B, D0, 40, B1, 25, 8D, 77, E5, D1, 42, E8, D7, B1, D2, 61, 96, 3B, 17, DC, 20, FB, E8, C5, 3F, 75, DC, DA, 87, DD, 09, C5, C5, 04, 5E, 16, 21, 8A, 77, 92, 17, 8B, AA, 87, DB, 13, 02, BF, 73, 9C, 46, 96, 41, 1E, 0E, DC, 0A, AD, 4E, 8E, 89, C3, 8D, A6, A4, 3D, 71, E8, 0A, D0, 25, 59, C2... 
[+]

Packer / compiler:

ASProtect v1.2x (New Strain)

Code size:

6.4 MB (6,709,248 bytes)

Scan sframe.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.