» scratch-444.3.exe
Overview
Analysis
File Details
Downloads (5)

scratch-444.3.exe

File name:

scratch-444.3.exe

MD5:

24d74d90154c6750af23d303cf4905cd

SHA-1:

11a54976e99baa04e8cb1741103c0ec3228175c0

SHA-256:

ac3d4f6e062d5547f475d4587867b0c6e5b962127dd1bfab16145124c8949752

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

12/26/2024 3:38:16 PM UTC (today)

File size:

63.7 MB (66,743,009 bytes)

Common path:

C:\users\{user}\downloads\scratch-444.3.exe.part

File PE Metadata

Compilation timestamp:

11/22/2015 1:43:58 AM

OS version:

5.0

OS bitness:

Win32

Subsystem:

Windows GUI

Linker version:

9.0

CTPH (ssdeep):

1572864:VKvzROV7+YjNxrGhqoQVqP6Y1/eFTD2OB/woE6rXk/1H5:uRU7+hhjQVqPn121DZZrk/b

Entry address:

0x12D4

Entry point:

E8, C6, 22, 00, 00, E9, 78, FE, FF, FF, 8B, FF, 55, 8B, EC, 8B, 45, 08, 33, C9, 3B, 04, CD, 08, 70, 41, 00, 74, 13, 41, 83, F9, 2D, 72, F1, 8D, 48, ED, 83, F9, 11, 77, 0E, 6A, 0D, 58, 5D, C3, 8B, 04, CD, 0C, 70, 41, 00, 5D, C3, 05, 44, FF, FF, FF, 6A, 0E, 59, 3B, C8, 1B, C0, 23, C1, 83, C0, 08, 5D, C3, E8, 2B, 1F, 00, 00, 85, C0, 75, 06, B8, 70, 71, 41, 00, C3, 83, C0, 08, C3, 8B, FF, 55, 8B, EC, 33, C0, 39, 45, 08, 6A, 00, 0F, 94, C0, 68, 00, 10, 00, 00, 50, FF, 15, 68, 10, 41, 00, A3, EC, 7C, 41, 00, 85... 
[+]

Entropy:

7.9991 (probably packed)

Code size:

62 KB (63,488 bytes)

The file scratch-444.3.exe has been seen being distributed by the following 5 URLs.

http://host16.tyjh.tyc.edu.tw/~eve/tree/teach/scratch-th/.../Scratch-444.3.exe

https://pogorzalki-my.sharepoint.com/.../default.aspx?apr=1&wa=wsignin1.0

https://scratch.mit.edu/scratchr2/static/.../Scratch-444.3.exe

https://download.scratch.mit.edu/scratch2download/.../Scratch-444.3.exe

http://cdn.scratch.mit.edu/scratchr2/static/.../Scratch-444.3.exe

Scan scratch-444.3.exe - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.