home

sw_c_orara.exe

MD5:
f3e6e0391c8b4f6ba4891a8131950569

SHA-1:
8e2e7f743d3a2729f8d3b9578c6e9721c6d717a7

SHA-256:
acf720114996de186ee49ca354d724ce88718e946c7a8b7bd6dde83acddb4e10

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
11/23/2024 10:46:23 PM UTC  (today)

File size:
465.5 KB (476,702 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\sw_c_orara.exe

File PE Metadata
Compilation timestamp:
3/2/2015 11:59:10 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows Console

Linker version:
2.56

CTPH (ssdeep):
12288:FXAN4wgUa5kUdn1gk5ANImBGrfpMc2feIu0hYR5oMfcEiP/3IWVJ/WxYcbzG:FwN4wgUa5kQLrfpv2GO6w/v

Entry address:
0x1220

Entry point:
55, 89, E5, 83, EC, 08, C7, 04, 24, 01, 00, 00, 00, FF, 15, FC, 81, 44, 00, E8, C8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 89, E5, 83, EC, 08, C7, 04, 24, 02, 00, 00, 00, FF, 15, FC, 81, 44, 00, E8, A8, FE, FF, FF, 90, 8D, B4, 26, 00, 00, 00, 00, 55, 8B, 0D, 3C, 82, 44, 00, 89, E5, 5D, FF, E1, 8D, 74, 26, 00, 55, 8B, 0D, 24, 82, 44, 00, 89, E5, 5D, FF, E1, 90, 90, 90, 90, 55, 89, E5, 5D, E9, 17, C0, 00, 00, 90, 90, 90, 90, 90, 90, 90, 55, 89, E5, 83, EC, 28, 8B, 45, 10, 89, 04, 24, E8, CF, 10, 01...
 
[+]

Entropy:
6.0519

Packer / compiler:
Dev-C++ 4.9.9.2

Code size:
247.5 KB (253,440 bytes)

The file sw_c_orara.exe has been seen being distributed by the following URL.

https://www.edmodo.com/file?id=f81ab3e95921af20509a1f1b46b76afc&folder_id=4917939

Scan sw_c_orara.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.