home

Yaatra - Shreenija Travels.exe

Yaatra

Spidermoves Infotech Pvt. Ltd.

Publisher:
Spidermoves Infotech Pvt. Ltd.

Product:
Yaatra

Version:
1.00.0001

MD5:
9cfe4e46a0002a3cf66af53a927d0fb8

SHA-1:
78a5be4c2da6b70fb027b9a9845e43743f9908a2

SHA-256:
0e8d7feafd41cb28ff62baa5085c4e8c3cd11d3d2d2143d1640344fc5c6639cf

Scanner detections:
0 / 68

Status:
Clean (as of last analysis)

Analysis date:
4/29/2024 6:16:09 PM UTC  (today)

File size:
30.6 MB (32,100,352 bytes)

Product version:
1.00.0001

Original file name:
Yaatra - Shreenija Travels.exe

File type:
Executable application (Win32 EXE)

Language:
English (United States)

File PE Metadata
Compilation timestamp:
3/15/2016 6:20:24 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
786432:zcn75wlE0e8FnvrmcC5g04QgxIywr6urGNzhKFkMGFzNvfYRHU5gYX568wbqs7AG:Yn75wlE0e8FnvrmcC5g04QgxIywr6urL

Entry address:
0x2E29C

Entry point:
68, 08, 4E, 47, 00, E8, F0, FF, FF, FF, 00, 00, 00, 00, 00, 00, 30, 00, 00, 00, 38, 00, 00, 00, 00, 00, 00, 00, A3, F6, AB, CB, 66, A6, F9, 45, 8E, 3F, C6, 83, E9, F4, 83, D8, 00, 00, 00, 00, 00, 00, 01, 00, 00, 00, 00, 00, 00, 00, 00, 00, 59, 61, 61, 74, 72, 61, 00, 00, 43, 3A, 5C, 57, 49, 4E, 44, 4F, 57, 53, 5C, 44, 65, 73, 6B, 74, 6F, 70, 5C, 59, 41, 41, 54, 52, 41, 20, 54, 52, 41, 56, 45, 4C, 53, 5C, 59, 41, 41, 54, 52, 41, 48, 45, 4C, 50, 00, 00, 00, 00, FF, CC, 31, 00, 03, 49, 7F, 4C, D2, 6D, 6E, 83...
 
[+]

Entropy:
5.8302

Developed / compiled with:
Microsoft Visual Basic v5.0/v6.0

Code size:
30.6 MB (32,088,064 bytes)

The file Yaatra - Shreenija Travels.exe has been seen being distributed by the following URL.

https://doc-04-50-docs.googleusercontent.com/docs/securesc/01f2fuce34gr0fbcdv7lv0j6la802ahg/hmhf5l2l59kujq9ehomifomk3dssrjjp/1460210400000/.../16716672935840462392/0B3BJX9RTGsDGcFphS2dKWDZXX1E?e=download

Scan Yaatra - Shreenija Travels.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.