home

sodecay.exe

This is a setup program which is used to install the application. The file has been seen being downloaded from fra-7m15-stor03.uploaded.net and multiple other hosts.
MD5:
4658b4f4ec7278490c5bbf4aba4c6180

SHA-1:
3fa3178de1503f034fba507f320a3ef055dfa307

SHA-256:
8b31c7e0a58792584b908fdf389ce82846dd3a86644178c91bb7d56e677b2485

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
12/27/2024 11:54:30 PM UTC  (a few moments ago)

File size:
3.5 MB (3,708,714 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\sodecay.exe

File PE Metadata
Compilation timestamp:
12/1/2013 6:08:28 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
98304:BJB6wZspXZ6LSk8ayAcBXupPq3ewoXhEmL3KV/L1kPOcJqRrc:AwFLSkXZhv3EL1kPzJqRw

Entry address:
0x108AF

Entry point:
E8, 9C, 58, 00, 00, E9, 78, FE, FF, FF, 55, 8B, EC, 83, EC, 04, 89, 7D, FC, 8B, 7D, 08, 8B, 4D, 0C, C1, E9, 07, 66, 0F, EF, C0, EB, 08, 8D, A4, 24, 00, 00, 00, 00, 90, 66, 0F, 7F, 07, 66, 0F, 7F, 47, 10, 66, 0F, 7F, 47, 20, 66, 0F, 7F, 47, 30, 66, 0F, 7F, 47, 40, 66, 0F, 7F, 47, 50, 66, 0F, 7F, 47, 60, 66, 0F, 7F, 47, 70, 8D, BF, 80, 00, 00, 00, 49, 75, D0, 8B, 7D, FC, 8B, E5, 5D, C3, 55, 8B, EC, 83, EC, 10, 89, 7D, FC, 8B, 45, 08, 99, 8B, F8, 33, FA, 2B, FA, 83, E7, 0F, 33, FA, 2B, FA, 85, FF, 75, 3C, 8B...
 
[+]

Code size:
98 KB (100,352 bytes)

The file sodecay.exe has been seen being distributed by the following 8 URLs.

http://fra-7m15-stor03.uploaded.net/.../b47d01a2-664c-4963-b3fc-4a62e59e23b5

http://fra-7m15-stor03.uploaded.net/.../2cd1cd4d-eaed-40f7-a74a-4d28503202d8

http://fra-7m15-stor03.uploaded.net/.../14bbce3b-a0b8-4a47-9daa-9b04de331c97

http://fra-7m15-stor03.uploaded.net/.../d95b1ca0-a1df-4186-8acf-84b68e143c6a

http://fra-7m15-stor03.uploaded.net/.../372fedcc-64b0-4fec-adce-883c64dbf0b4

http://fra-7m15-stor03.uploaded.net/.../39483ab1-5e50-48bd-abd9-7c2551d5f892

http://fra-7m15-stor03.uploaded.net/.../4d623e51-409b-40c2-bcc5-1adcf8cbb19f

http://fra-7m15-stor03.uploaded.net/.../3ff9ff3e-c7ad-441c-9a4b-23c595ab7a19

Scan sodecay.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.