Gridinsoft Logo
File Icon

Flips.exe Malware GenericMC Analysis

Updated 1 year ago
Checked by Malware Check
flips.exe

Technical Analysis

File Name flips.exe
File Type
PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Scanner Version 1.0.168.174
Database Version 2024-03-04 12:00:18 UTC
⚠

Malware.Win32.GenericMC.cc

Malware family: GenericMC

This generic detection covers files showing Trojan horse indicators. It identifies malware that appears legitimate but contains hidden malicious functionality designed to compromise system integrity or user data.
N/A
Detection Rate
113,664
File Size (bytes)
2024-03-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7e77eba5c983fcb159a71df22b7e5210
SHA1
b9937236e3a5421436e88ad60169cc858e7d0836
SHA256
1d0c2fa27eba12965276a63306cba5cfe57102930dd83d10ecbc6956edf35da6
SHA512
393525e1f7588034e0ad8b78a738c5addae1aa2867c065b59b5ae7e9b850329ec1f04365d62445942bf8f363dfdcbe7991e58f573ed24f737533e5f1f8e3ea72
ImpHash
b9cdcfe77b5434472f10d006f2a19603

PE Analysis

Basic Information

▼
Icon
Hash: a3a66ca4e3a56fc79a5ff5d1cb44c5a2
Fuzzy: 920dadb973b4c9f62f4ddc5227011e38
dHash: b0a4b2b2844c0000
Image Base 0x00400000
Entry Point 0x004014c0
Compilation Time 1970-03-25 10:31:05
Checksum 0x00023611 (Actual: 0x00023611)
OS Version 4.0
PEiD Signatures PE32 executable (GUI) Intel 80386 (stripped to external PDB), for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 8 libraries
ADVAPI32, COMCTL32, COMDLG32, GDI32, KERNEL32, msvcrt, SHELL32, USER32
Exports 0 functions
Resources 14 Resources
Sections 8 Sections

Version Information

▼
CompanyName Alcaro
FileDescription Flips Patch Utility
FileVersion 1.3.1.0
InternalName Floating IPS
LegalCopyright ©2013-2015 Alcaro
OriginalFilename flips.exe
ProductName Floating IPS
ProductVersion 1.3.1.0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 73,716 bytes 73,728 bytes 6.27 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_16BYTES 971647824619CB6AA61D1074876D8B64
.data 0x00013000 92 bytes 512 bytes 0.80 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 4E5E93C0DDB3B500C5C2C4A08C91311B
.rdata 0x00014000 13,256 bytes 13,312 bytes 4.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_ALIGN_64BYTES B25D732032E1B27018B752FE527627F5
.bss 0x00018000 1,104 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_32BYTES D41D8CD98F00B204E9800998ECF8427E
.idata 0x00019000 3,772 bytes 4,096 bytes 5.05 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 2DCF2BC209B53344AEBF013BF2E912A6
.CRT 0x0001a000 52 bytes 512 bytes 0.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 4FE21906E4DFDE407133C21C7C611E9D
.tls 0x0001b000 32 bytes 512 bytes 0.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 403958B514E2DF4064EA793C51A70B01
.rsrc 0x0001c000 19,936 bytes 19,968 bytes 3.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE|IMAGE_SCN_ALIGN_4BYTES 747FEF4375E6A60D85CE7BCF07F29209

Resource Analysis

▼
Total Resources: 14 (9,183 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 8,040 bytes
87.6%
RT_GROUP_ICON 3 144 bytes
1.6%
RT_VERSION 1 632 bytes
6.9%
RT_MANIFEST 1 367 bytes
4%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win32.GenericMC.cc Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.GenericMC.cc without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware