home

astapoc.exe

1.4.0.7145 2016/01/21 02:30 1.4.0 #37

BitRaider LLC

Publisher:
BitRaider, LLC  (signed by BitRaider LLC)

Product:
1.4.0.7145 2016/01/21 02:30 1.4.0 #37

Description:
BitRaider Distribution Web Client

Version:
1.4.0.7145

MD5:
a749bffef88c1e9159c395c74748803a

SHA-1:
76d452ad53826cb58828363568c8babac178f5ad

SHA-256:
a07399a2b21735a770d90fb09e15edeb2901330e22a8a5af95508bdba326239c

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/24/2024 12:41:30 AM UTC  (today)

File size:
10.9 MB (11,429,016 bytes)

Product version:
1.4.0.7145

Copyright:
Copyright (C) 2014 BitRaider, LLC

Original file name:
BRWC.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

Common path:
C:\users\{user}\downloads\astapoc.exe

Digital Signature
Signed by:
BitRaider LLC

Authority:
VeriSign, Inc.

Valid from:
7/2/2015 7:30:00 PM

Valid to:
8/1/2018 7:29:59 PM

Subject:
CN=BitRaider LLC, O=BitRaider LLC, L=Jacksonville, S=Florida, C=US

Issuer:
CN=VeriSign Class 3 Code Signing 2010 CA, OU=Terms of use at https://www.verisign.com/rpa (c)10, OU=VeriSign Trust Network, O="VeriSign, Inc.", C=US

Serial number:
7E6AD422896928C39F54CB79E991AFFF

File PE Metadata
Compilation timestamp:
1/21/2016 3:05:15 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:aC8U5BnOUJsv6tWKFdu9CjuTvmo5szfhQ/yyY0MNZifsYbG:58UflJsv6tWKFdu9CjuTvmo5sztyY1kq

Entry address:
0x2462B7

Entry point:
E8, BA, 4C, 01, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 83, EC, 10, 83, 65, FC, 00, 56, 8B, 75, 08, 85, F6, 75, 16, E8, 65, CF, FF, FF, 6A, 16, 5E, 89, 30, E8, EE, B0, 00, 00, 8B, C6, E9, 0C, 02, 00, 00, 6A, 24, 68, FF, 00, 00, 00, 56, E8, 38, 30, 00, 00, 8B, 45, 0C, 83, C4, 0C, 85, C0, 74, D3, 8B, 08, 8B, 40, 04, 89, 4D, F0, 89, 45, F4, 83, F8, FF, 7F, 16, 7C, 08, 81, F9, 40, 57, FF, FF, 73, 0C, E8, 1E, CF, FF, FF, 6A, 16, 5E, 89, 30, EB, BC, 83, F8, 07, 7C, 0A, 7F, ED, 81, F9, CF, 26, 41, 93, 77, E5...
 
[+]

Code size:
2.9 MB (3,001,344 bytes)

Scan astapoc.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.