home

dare la la la.exe

Onlain Sekyuriti Sistems, OOO

The executable dare la la la.exe has been detected as malware by 1 anti-virus scanner. This is a setup program which is used to install the application. The file has been seen being downloaded from forces.green-enters.ru.
Publisher:
Onlain Sekyuriti Sistems, OOO  (signed and verified)

MD5:
c27ec6b390d90950b93771374bb482ec

SHA-1:
bf03f2635c7c1b0565da02442ca9058f06b29016

SHA-256:
3cac4a60b48b1bfe7768d2e79a74bfd3340da46591e4974dc94bb189b9d93afc

Scanner detections:
1 / 68

Status:
Malware

Analysis date:
4/26/2024 12:26:09 PM UTC  (today)

Scan engine
Detection
Engine version

Reason Heuristics
PUP (M)
16.7.27.21

File size:
410.9 KB (420,768 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\dare la la la.exe

Digital Signature
Signed by:
Onlain Sekyuriti Sistems, OOO

Authority:
COMODO CA Limited

Valid from:
3/26/2014 6:00:00 AM

Valid to:
3/27/2015 5:59:59 AM

Subject:
CN="Onlain Sekyuriti Sistems, OOO", O="Onlain Sekyuriti Sistems, OOO", STREET="12 Komn 42, ul.Vrubelya", L=Moscow, S=Moscow region, PostalCode=125080, C=RU

Issuer:
CN=COMODO Code Signing CA 2, O=COMODO CA Limited, L=Salford, S=Greater Manchester, C=GB

Serial number:
38AA823949978CC988A90C3D6FDCCF0F

File PE Metadata
Compilation timestamp:
4/10/2014 8:25:29 PM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.15

CTPH (ssdeep):
6144:8HXrZtI8U/nyGcNfBzjl+sObwm4XK+hQGAteRRwLxGAFQRY2oUVIWFvT:qrs8U/KfpYs3d5u9kmDUqg

Entry address:
0x4390

Entry point:
C1, FE, 0B, C1, FB, 0C, 81, CE, 55, B6, 6A, 15, 4E, 49, C1, D5, 00, D1, C5, F5, 31, DB, 0B, 5C, 24, F8, 03, 44, 24, 08, 43, 29, E7, BF, B1, 73, BA, DF, C1, FE, 18, C1, D1, 08, 81, C7, E7, D1, 85, 20, 21, F5, C1, C8, 00, 87, EE, 4F, C1, D0, 1B, 48, 47, 4B, 1B, 0C, 24, FD, C1, E3, 0E, 0F, B6, 2F, C1, D8, 1F, C1, F9, 1B, C1, FE, 13, 1B, 05, 80, F5, 41, 00, 81, C5, 98, 7F, 32, D4, C1, F8, 11, FD, 81, C5, 00, C5, 0D, 2C, 81, 7C, 24, F4, 5E, 24, 02, BB, 81, CE, 63, 89, 7B, A2, 8A, 55, 00, 29, DE, 2D, 35, 1A, 9C...
 
[+]

Code size:
345.5 KB (353,792 bytes)

The file dare la la la.exe has been seen being distributed by the following URL.

http://forces.green-enters.ru/NTM2NTtodHRwJTNBJTJGJTJGenZ1a29mZi5ydSUyRmRvd25sb2FkJTJGMjc0MDg4NDtuYW1lPURhcmUrJTI4TGErTGErTGElMjk7c2l6ZT00NDgxOTM0O3R5cGU9YXVkaW8=

Remove dare la la la.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.