ladadate_mail.exe

ODSsoft

This is a setup program which is used to install the application. The file has been seen being downloaded from cloclo28.cldmail.ru.
Publisher:
ODSsoft

Description:
Автоматическая рассылка сообщений

Version:
2.14.9.1

MD5:
8ab56cc25574071823ab5c8dc8855c96

SHA-1:
62d58a1d89f2d8fcd2d79ab771cfd1a371d9fc79

SHA-256:
b759dec2836d3cd0e6b6f20fc39204282e040b793c62fd0c1915e816a4c0bd27

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/26/2024 11:49:14 PM UTC  (a few moments ago)

File size:
963.5 KB (986,624 bytes)

Product version:
1.0.0.0

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\ladadate_mail.exe

File PE Metadata
Compilation timestamp:
6/20/1992 1:22:17 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
2.25

CTPH (ssdeep):
24576:z+TlhEPyuk7dOGobplyhP5vt8cA17j97inB6:z2gDkC9YPOt7j97n

Entry address:
0xC0C0C

Entry point:
55, 8B, EC, 83, C4, F0, B8, B4, 07, 4C, 00, E8, 3C, 64, F4, FF, A1, 6C, 3A, 4C, 00, 8B, 00, E8, 04, 2E, FA, FF, A1, 6C, 3A, 4C, 00, 8B, 00, BA, 84, 0C, 4C, 00, E8, DB, 29, FA, FF, 8B, 0D, D0, 38, 4C, 00, A1, 6C, 3A, 4C, 00, 8B, 00, 8B, 15, 10, D8, 4B, 00, E8, F3, 2D, FA, FF, 8B, 0D, 3C, 3A, 4C, 00, A1, 6C, 3A, 4C, 00, 8B, 00, 8B, 15, 04, D6, 4B, 00, E8, DB, 2D, FA, FF, A1, 6C, 3A, 4C, 00, 8B, 00, E8, 4F, 2E, FA, FF, E8, BE, 3C, F4, FF, 00, 00, FF, FF, FF, FF, 0D, 00, 00, 00, 4C, 61, 64, 61, 44, 61, 74, 65...
 
[+]

Developed / compiled with:
Microsoft Visual C++

Code size:
767.5 KB (785,920 bytes)

The file ladadate_mail.exe has been seen being distributed by the following URL.

Scan ladadate_mail.exe - Powered by Reason Core Security