File Name | Launcher.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.213.174 |
Database Version | 2025-04-13 00:00:23 UTC |
Malware family: CoinMiner
Hash Type | Value | Action |
---|---|---|
MD5 |
5f335a35ae024a0269ecb9cdec98c61c
|
|
SHA1 |
52d58f06db89f360a389f5b92c8490c748e6d310
|
|
SHA256 |
205c04a83a4294a06fb87d6037df1d0fbda876493269fbb58a8d697242b695cc
|
|
SHA512 |
f5e072f3638043484c6b7681487780842c3f43fecc7ea6db95edc869f7e076a80fd54745184c814b03724b997a3dd76a8209811853fac9d9b1733ab3299af2e1
|
|
ImpHash |
5877688b4859ffd051f6be3b8e0cd533
|
Icon |
Hash: 59566656572c3245c6def7091e42181c
Fuzzy: b2764f6b84f036fb6164289b7fec6f72 dHash: 5830b0fc74b4e470 |
Image Base | 0x00400000 |
Entry Point | 0x00401000 |
Compilation Time | 2018-02-01 20:18:00 |
Checksum | 0x00000000 (Actual: 0x00023d72) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
9 libraries
MSVCRT, KERNEL32, USER32, GDI32, COMCTL32, SHELL32, WINMM, OLE32, SHLWAPI |
Exports | 0 functions |
Resources | 13 Resources |
Sections | 5 Sections |
CompanyName | ORiGiNS |
LegalCopyright | ORiGiNS |
Translation | 0x0000 0x04e4 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.code |
0x00001000 |
14,320 bytes | 14,336 bytes | 5.61 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D8AF5494A902A4276E7A118E639A9058 |
.text |
0x00005000 |
53,154 bytes | 53,248 bytes | 6.59 (Compressed) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
3D44ADF99D47C66DF6ED2C6ECDE44714 |
.rdata |
0x00012000 |
13,216 bytes | 13,312 bytes | 7.11 (Compressed) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
E4A2346F39E8C4C981487F3B09547FAF |
.data |
0x00016000 |
5,924 bytes | 4,608 bytes | 4.94 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
8F719B08A0B5EEFBB620B58B6DE3BEF1 |
.rsrc |
0x00018000 |
15,104 bytes | 15,360 bytes | 4.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
59E61CB39D9F99DFC9BBD725FA366703 |
2 section(s) with elevated entropy (≥6.5) - possible compression
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 6 | 12,976 bytes | |
RT_RCDATA | 4 | 99 bytes | |
RT_GROUP_ICON | 1 | 90 bytes | |
RT_VERSION | 1 | 320 bytes | |
RT_MANIFEST | 1 | 611 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Win32.CoinMiner.vb without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system