Gridinsoft Logo
File Icon

AnyLoaderV2.1.exe Trojan Heuristic Analysis

Updated 1 year ago
Checked by Malaware Check
AnyLoaderV2.1.exe

Technical Analysis

File Name AnyLoaderV2.1.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.167.174
Database Version 2024-02-24 00:00:14 UTC
⚠

Trojan.Heur!.032120A3

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
4,709,904
File Size (bytes)
2024-02-24
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
24628f88fe9e88fe88b411c81c387612
SHA1
cae35ecfbe85073dd8b2b4a07c1d6e9aca49e33b
SHA256
0b024b60c2f40f360fee7f93d80d69cc738d6c8cc4492ba9a2549a19cab21c3d
SHA512
aac50c9ba01a7c7772a0c53117f6cb9748150000d2c05263dc7ae8302cba64ad78e81d1fa9a1c11f4b82fb985925651500580dc766de096e318792b622fff914
ImpHash
a27f29b865aa57c256d5bfedb8c89fd9

PE Analysis

Basic Information

▼
Icon
Hash: 1eca800e5794555d102bec5f57b77e78
Fuzzy: 2583dcb4b311265620af663960b058bf
dHash: e4c6322b4d1e9cd8
Image Base 0x140000000
Entry Point 0x1407ee058
Compilation Time 2024-02-17 00:17:24
Checksum 0x00482fd8 (Actual: 0x004800ad)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 14 libraries
Exports 0 functions
Resources 8 Resources
Sections 13 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
vwVQkc1s 0x00001000 1,215,470 bytes 589,724 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 75E1C98EDA555F56E66CE5DB794B56A7
bXDnM7g6 0x0012a000 283,564 bytes 115,296 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3B00380A25B7C9AE1979784F565E9466
vfCOpZC4 0x00170000 303,828 bytes 211,774 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 2FF5D38230DD145EAA939081E53858A0
dX976dAV 0x001bb000 47,256 bytes 27,692 bytes 7.66 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FA012E5BEC972647D35357E0C6E0604C
RdDbq5oh 0x001c7000 500 bytes 259 bytes 7.01 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 07F74D08C8E0203B324A814DA130B7F2
psSNUPEN 0x001c8000 139,656 bytes 71,659 bytes 7.95 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9BB71432D2212FE683A884359F0B81A2
3gyedgej 0x001eb000 8,012 bytes 2,824 bytes 7.52 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A601542D3ED9BAB24C9EA83C4741BEBA
FAGNg1Ss 0x001ed000 4,096 bytes 1,024 bytes 3.59 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE EABF2CEF0F9F6994E0F6A3AF7A507643
F5Zo94DN 0x001ee000 4,096 bytes 512 bytes 0.28 (Normal) IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AAB9D2E68B753734EC39E3CFF47FAB57
94jjsElG 0x001ef000 139,776 bytes 139,776 bytes 5.15 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 80D5B8812B9583CB7CB319BE8A2CF027
rqmhvUPI 0x00212000 6,144,000 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
fe1JcmfW 0x007ee000 3,546,112 bytes 3,546,112 bytes 7.96 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 59C39FB412F4CFECFB493F96597EAB0F
ZVvuPHOK 0x00b50000 4,096 bytes 16 bytes 2.47 (Normal) IMAGE_SCN_MEM_READ 2DA68F653B1978811E7416ED518C8F1C
Entropy Analysis Alert

7 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 8 (139,169 bytes)
Resource Type Count Total Size Percentage
RT_ICON 6 138,687 bytes
99.7%
RT_GROUP_ICON 1 90 bytes
0.1%
RT_MANIFEST 1 392 bytes
0.3%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.032120A3 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.032120A3 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware