Gridinsoft Logo
File Icon

Napse.exe Trojan Heuristic Analysis

Updated 11 months ago
Checked by Malaware Check
Napse.exe

Technical Analysis

File Name Napse.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.180.174
Database Version 2024-06-25 03:00:30 UTC
⚠

Trojan.Heur!.032104A3

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
92,984,320
File Size (bytes)
2024-06-25
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7a4ef50c6117cfb2c379c5a8d8ba03fc
SHA1
9ffa7cb1445bf5cc52ec137fb8abacebce55c0bc
SHA256
04a7bd1df5cdade3ce8c37af666eb892e742bc79cf0299112b84033f6c87d4a6
SHA512
87ea0946ea21fa09f01baf1413168fbdd23e52dc520374e80007ba2beaf127cf57af5e06e3aa080914fe29849e1418b38a7259411c5b7da1d37db2d6deb4da78
ImpHash
a8369a581a563d51e3a921c67aa46d87

PE Analysis

Basic Information

▼
Icon
Hash: 4f569aa567b95219365e405a97ad84ca
Fuzzy: 3a09b385f63ac0f93f3506fb5b8565d2
dHash: c0c080d0fa164100
Image Base 0x140000000
Entry Point 0x146a89a52
Compilation Time 2024-06-23 03:16:26
Checksum 0x058adfa4 (Actual: 0x058adfa4)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 2 libraries
SHELL32, KERNEL32
Exports 0 functions
Resources 4 Resources
Sections 12 Sections

Version Information

▼
CompanyName Napse
ProductName Napse.AC
FileDescription Napse
LegalCopyright napse.ac
ProductVersion 4.0.0.0
FileVersion 4.0.0.0
OriginalFilename Napse.exe
InternalName Napse
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 125,632 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.rdata 0x00020000 51,488 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.data 0x0002d000 77,344 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.pdata 0x00040000 6,048 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
_RDATA 0x00042000 348 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.DvG 0x00043000 33,015,188 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.reloc 0x01fc0000 1,668 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.vlizer 0x01fc1000 13,010,432 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.TBi 0x02c2a000 54,073,552 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.E#b 0x05fbc000 2,464 bytes 2,560 bytes 0.17 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E8F0C6231E39797A595DD59C7DA0FE31
.kw( 0x05fbd000 92,939,680 bytes 92,939,776 bytes 7.94 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_NOT_PAGED|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 1E4207C52DADC78D7360D030E697435E
.rsrc 0x0b860000 40,835 bytes 40,960 bytes 7.93 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 15FD2C20B7F3ADD6F807F1E346BCDC7C
Entropy Analysis Alert

2 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 4 (40,520 bytes)
Resource Type Count Total Size Percentage
RT_ICON 1 38,845 bytes
95.9%
RT_GROUP_ICON 1 20 bytes
0%
RT_VERSION 1 628 bytes
1.5%
RT_MANIFEST 1 1,027 bytes
2.5%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.032104A3 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.032104A3 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware