home

sframe.exe

Gala Lab

Publisher:
Gala Lab  (signed and verified)

MD5:
2c65b6d770fc6c474350a030c58f0753

SHA-1:
e8fd8d1205b9133ee435cf50ec7bfe47c33db548

SHA-256:
3c8cc363c0105446559e334e3996f5ccbc5f64783cbeb9191f012e7ef9ed262f

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/24/2024 10:38:30 PM UTC  (today)

File size:
3.9 MB (4,062,848 bytes)

File type:
Executable application (Win32 EXE)

Digital Signature
Signed by:
Gala Lab

Authority:
Thawte, Inc.

Valid from:
8/25/2010 1:00:00 AM

Valid to:
8/25/2012 12:59:59 AM

Subject:
CN=Gala Lab, OU=Tech Support Headquarters, O=Gala Lab, L=Gangnam-gu, S=Seoul, C=KR

Issuer:
CN=Thawte Code Signing CA - G2, O="Thawte, Inc.", C=US

Serial number:
69CBF2716573D8320C4523E455080837

File PE Metadata
Compilation timestamp:
5/22/2012 2:20:07 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

CTPH (ssdeep):
98304:YyfZYwltE2xJtxRz89gpNSZmXCzODEmI9ilyxJN4lEViO1JU:dZYwjFxZRQqpcZaIEmNcEVXU

Entry address:
0x1000

Entry point:
68, 01, 30, DD, 00, E8, 01, 00, 00, 00, C3, C3, 53, C9, 6E, 62, 04, CC, 3C, BA, 22, D7, 65, 2D, 93, F5, 76, 25, 39, 2C, 46, 91, BC, EE, 23, 57, 92, 47, 66, 6C, 9A, DE, 63, 5A, 4C, B1, 5E, 74, B9, BF, FB, C0, B0, DD, 0E, A7, 32, 6C, 13, B4, 5D, 53, 03, 45, 69, 51, 2B, FA, 8D, 02, 91, 11, 2F, 95, 65, 59, 4C, 88, 57, 40, A4, 05, 29, FA, DA, F7, 95, 72, D0, 21, 64, 00, 98, 55, C3, 48, 65, 79, 71, F5, 51, 5B, 8D, 73, E6, 96, 5E, FD, CD, 90, 17, 90, 71, E9, 07, 41, 91, 17, 7C, A9, F2, 91, 53, BC, A1, 91, 2C, 61...
 
[+]

Entropy:
7.9347

Packer / compiler:
ASProtect v1.2x (New Strain)

Code size:
6.4 MB (6,684,672 bytes)

Scan sframe.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.