home

oaj2se.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from vpn.nwc.com.sa.
MD5:
2103eb3d131d9bf33ab7d49e95131848

SHA-1:
683e0ed277eb722919c60811daedd251387f06d7

SHA-256:
c1244f3cfe49802befb7de48b69543756f361a0d24c54a19b5a0a682e2998e82

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/27/2024 7:07:29 AM UTC  (today)

File size:
11 MB (11,578,201 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\oaj2se.exe

File PE Metadata
Compilation timestamp:
4/1/2016 8:17:09 AM

OS version:
5.1

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
10.0

CTPH (ssdeep):
196608:XW43cUNzWiXN4tY4h6gY3cH6oWcEor3WaB4TR7oSFh2TH+sUU8+v:GKcoWid4dUR3pofEs392TR7oa8bUc

Entry address:
0xD6D8

Entry point:
E8, 11, 87, 00, 00, E9, 89, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 14, 56, 85, C0, 74, 41, 83, 7D, 08, 00, 75, 13, E8, D8, 64, 00, 00, 6A, 16, 5E, 89, 30, E8, 47, 73, 00, 00, 8B, C6, EB, 2A, 83, 7D, 10, 00, 74, E7, 39, 45, 0C, 73, 0E, E8, BA, 64, 00, 00, 6A, 22, 59, 89, 08, 8B, F1, EB, DE, 50, FF, 75, 10, FF, 75, 08, E8, 03, F9, FF, FF, 83, C4, 0C, 33, C0, 5E, 5D, C3, 8B, FF, 55, 8B, EC, 8D, 45, 14, 50, 6A, 00, FF, 75, 10, FF, 75, 0C, FF, 75, 08, E8, 3D, 37, 00, 00, 83, C4, 14, 5D, C3, CC, CC, CC, CC, CC...
 
[+]

Entropy:
7.9984  (probably packed)

Code size:
130.5 KB (133,632 bytes)

The file oaj2se.exe has been seen being distributed by the following URL.

https://vpn.nwc.com.sa/.../,DanaInfo=cproerpeap000.pro.hq.nwc,Port=8000 oaj2se.exe

Scan oaj2se.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.