home

SOFFICE.EXE

OpenOffice.org

Publisher:
OpenOffice.org

Description:
OpenOffice.org 3.4

Version:
3.04.9590

MD5:
55ac20f82da311d68a07ce2810f0827e

SHA-1:
9d7fcd91c3b61fe342d0f31ef7145fbba5637964

SHA-256:
47d166c57b1a1afe9e7e03d477287f329739f40103c1916e7950c91d03245fa4

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/27/2024 12:41:57 AM UTC  (today)

File size:
9.9 MB (10,376,704 bytes)

Product version:
3.04.9590

Copyright:
Copyright © 2000-2012 by Apache Software Foundation

Original file name:
SOFFICE.EXE

File type:
Executable application (Win32 EXE)

Language:
German (Germany)

Common path:
C:\Program Files\openoffice.org 3\program\soffice.exe

File PE Metadata
Compilation timestamp:
4/19/2012 1:46:55 AM

OS version:
5.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
9.0

CTPH (ssdeep):
196608:dmg4adWhxSd/FUpoWyKAozKY4TPLKAoRmyKn:TjdWxu/mpodKACXCzKA4Y

Entry address:
0x25F2

Entry point:
E8, DD, 04, 00, 00, E9, D8, FC, FF, FF, 8B, FF, 55, 8B, EC, 81, EC, 28, 03, 00, 00, A3, 48, 41, 40, 00, 89, 0D, 44, 41, 40, 00, 89, 15, 40, 41, 40, 00, 89, 1D, 3C, 41, 40, 00, 89, 35, 38, 41, 40, 00, 89, 3D, 34, 41, 40, 00, 66, 8C, 15, 60, 41, 40, 00, 66, 8C, 0D, 54, 41, 40, 00, 66, 8C, 1D, 30, 41, 40, 00, 66, 8C, 05, 2C, 41, 40, 00, 66, 8C, 25, 28, 41, 40, 00, 66, 8C, 2D, 24, 41, 40, 00, 9C, 8F, 05, 58, 41, 40, 00, 8B, 45, 00, A3, 4C, 41, 40, 00, 8B, 45, 04, A3, 50, 41, 40, 00, 8D, 45, 08, A3, 5C, 41, 40...
 
[+]

Entropy:
5.0477

Code size:
7.5 KB (7,680 bytes)

The file SOFFICE.EXE has been seen being distributed by the following 4 URLs.

http://bf1-attach.ymail.com/us.f1427.mail.yahoo.com/.../securedownload?mid=2_0_0_1_279088_AIb1i2IAAAc8UdHITwAAAM4pW4g&fid=Inbox&pid=2&clean=0&appid=YahooMailNeo&cred=iAfaYEZcf7CpVKvHNtZzLiBtQ_zMCAx9IPSY6pthYWSGCO0-&ts=1372702826&partner=ymail&sig=N2G157DSsld.tFUEMBtqkQ--

http://us-mg6.mail.yahoo.com/.../download?mid=2_0_0_1_279088_AIb1i2IAAAc8UdHITwAAAM4pW4g&fid=Inbox&pid=2&clean=0&appid=YahooMailNeo

http://bf1-attach.ymail.com/us.f1427.mail.yahoo.com/.../securedownload?mid=2_0_0_2_5112528_AIb1i2IAAA7lUdHIGQAAANZqWaY&fid=Sent&pid=2&clean=0&appid=YahooMailNeo&cred=ORRTy91zf7BThHzTiWnTzDft5vxd6.XkjMWH4Bw4iwOch9k-&ts=1372702789&partner=ymail&sig=qh0FlwTOGwuY3oz7ZVw6EQ--

http://us-mg6.mail.yahoo.com/.../download?mid=2_0_0_2_5112528_AIb1i2IAAA7lUdHIGQAAANZqWaY&fid=Sent&pid=2&clean=0&appid=YahooMailNeo

Scan SOFFICE.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.