home

DealingOffice.Trader.Russia.exe

DealingOffice

JSC Kalita-Finance

Publisher:
Kalita-Finance  (signed by JSC Kalita-Finance)

Product:
DealingOffice

Description:
DealingOffice iTrader

Version:
8.2.21.0

MD5:
8ddeb4e6eec1d8f9401e7994ef418537

SHA-1:
21818ebc427f0d443b93e08db717ef2dfe930a2d

SHA-256:
d5ae6ebcc68efc9d9ecc8afa9c8d91733b24a281149ac50017bc0f6299cde2aa

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
5/2/2024 3:54:01 PM UTC  (today)

File size:
355.2 KB (363,760 bytes)

Product version:
8.2.21.0

Copyright:
Copyright © Kalita-Finance 2007-2015

Original file name:
DealingOffice.Trader.Russia.exe

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\appdata\local\apps\2.0\gxdj0qdg.0qx\cdbn6ywj.a5a\deal..tion_93b52a0a51800428_0008.0002_00697980b826b0a2\dealingoffice.trader.russia.exe

Digital Signature
Signed by:
JSC Kalita-Finance

Authority:
GlobalSign nv-sa

Valid from:
5/20/2015 7:27:10 PM

Valid to:
7/7/2016 3:16:45 PM

Subject:
CN=JSC Kalita-Finance, O=JSC Kalita-Finance, L=Moscow, S=Moscow, C=RU

Issuer:
CN=GlobalSign CodeSigning CA - G2, O=GlobalSign nv-sa, C=BE

Serial number:
1121BDCB30A4914D98A5C1258418CFDB20F3

File PE Metadata
Compilation timestamp:
11/5/2015 11:27:11 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
11.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
3072:8nbejACyhWbFddi2rSHM/q3OrLPJnbejACyhWbFddi2rSHM/q3OrLPq7KoGCPqG+:O6FyhS/rWx3APp6FyhS/rWx3APDvKS

Entry address:
0x473CE

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 03, 00, 03, 00, 00, 00, 28, 00, 00, 80, 0E, 00, 00, 00, 58, 00, 00, 80, 10, 00, 00, 00, 70, 00, 00, 80, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 04, 00, 02, 00, 00, 00, 88, 00, 00, 80, 03, 00, 00, 00, A0, 00, 00, 80, 04, 00, 00, 00, B8, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
277 KB (283,648 bytes)

Scan DealingOffice.Trader.Russia.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.