Gridinsoft Logo
File Icon

Sakusei_Byoutou.exe Malware Gen Analysis

Updated 1 second ago
Checked by Malware Check
Sakusei_Byoutou.exe

Technical Analysis

File Name Sakusei_Byoutou.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.219.174
Database Version 2025-06-28 14:00:23 UTC
⚠

Malware.Win32.Gen.cld

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
6,496,768
File Size (bytes)
2025-06-28
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
ea3ca1ffc08fda0e702d4acc673c56a3
SHA1
fbaa0e34cee7d5ba8244ba2852d8249e9af9c558
SHA256
09fd76d7b14dbc4ced23433604074a24bbf0916250ab3d9d57680409fa84bf34
SHA512
598aabc9856849a461d27c2e9c3f917d7f509db604d2c143c476db4e8e2737e8191ee811cf4ba2dd4ede0b38c5e42ed55866836a15c793ceb4938c7499493468
ImpHash
5a0442226fe0b9600b096203c2d8114b

PE Analysis

Basic Information

▼
Icon
Hash: 1f371a4c7528b17b19f6f6c2eb768393
Fuzzy: d62ef139d95d18e533af59fbe701e7bb
dHash: ced3e6e0f06870e1
Image Base 0x00400000
Entry Point 0x0047227e
Compilation Time 2021-11-27 22:57:04
Checksum 0x0020d648 (Actual: 0x006410f2)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 15 libraries
Exports 0 functions
Resources 15 Resources
Sections 11 Sections

Version Information

▼
Comments
CompanyName
FileDescription
FileVersion 1, 0, 0, 0
InternalName
LegalCopyright
LegalTrademarks
OriginalFilename
PrivateBuild
ProductName YU-RIS Script Engine
ProductVersion 0, 555, 0, 0
SpecialBuild
Translation 0x0411 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,531,904 bytes 1,528,832 bytes 6.75 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 90FA9D8F2409CB773F9E1F533F6D2D65
.rdata 0x00177000 147,456 bytes 147,456 bytes 5.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3C8F97B5F21744D987A674BDBFFE6E62
.data 0x0019b000 3,002,368 bytes 120,320 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5BA2AA0E272C5D8C590AF4AE980969B4
_RDATA 0x00478000 28,672 bytes 26,624 bytes 5.64 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8A543B8310B0537EDBE433FD8F66DBAD
.data1 0x0047f000 4,096 bytes 512 bytes 3.03 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BA082D3CC3E8CD5D9282677E7951D88F
.sxdata 0x00480000 4,096 bytes 512 bytes 0.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_LNK_INFO|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0BB5022D59B138015CAD65FD5AA26745
.rsrca 0x00481000 290,816 bytes 289,280 bytes 6.38 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 96767E06CC8B6A911D93A72AC7138133
.ierdata 0x004c8000 110,592 bytes 106,496 bytes 3.52 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 85715383DCAB7BB8E84E2DA0423870A2
.xfudata 0x004e3000 110,592 bytes 105,984 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 89D44077A0D5E4930016756DCB6F2C89
.imrdata 0x004fe000 4,161,536 bytes 4,161,024 bytes 7.09 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0A3E93DCC759A87515D49B5E8167F89D
.ZDFX 0x008f6000 8,557 bytes 8,704 bytes 4.70 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 3AB1A85A98E01D7C8244D40BAF362B1F
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

2 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 15 (287,964 bytes)
Resource Type Count Total Size Percentage
YS_BIN 1 4 bytes
0%
YS_RES 1 4 bytes
0%
RT_ICON 4 285,408 bytes
99.1%
RT_DIALOG 6 822 bytes
0.3%
RT_GROUP_ICON 1 62 bytes
0%
RT_VERSION 1 724 bytes
0.3%
RT_MANIFEST 1 940 bytes
0.3%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win32.Gen.cld Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.Gen.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware