File Name | Setup_777921.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.217.174 |
Database Version | 2025-05-31 02:00:17 UTC |
Malware family: Snackarcin
Hash Type | Value | Action |
---|---|---|
MD5 |
29cbdd62eeaadfbea048f4d31262a64b
|
|
SHA1 |
6b180221687e5ef292bb5b9cbad55fcf4f90c40e
|
|
SHA256 |
2075c45692d6ee9a97b8bb51736edf573a5eccc30a8258d3eca5f01e14137111
|
|
SHA512 |
c97371b6c1c9e1b9c28610b1ea1b6383645017238359f083f184d40da71ceb1a29afc0280b420c2e9654091591d5ddbd9cb09251fe4a3b0483eda17b9aa5c378
|
|
ImpHash |
55579b316fb074f5d27e041638f8a66b
|
Icon |
Hash: e70ab6434b901bf0d86cad4f2e381b4b
Fuzzy: c0aeeb48c2783a270a993faae44e6ec1 dHash: 00b28eabababa600 |
Image Base | 0x00400000 |
Entry Point | 0x007a0ad5 |
Compilation Time | 2025-03-17 12:58:13 |
Checksum | 0x01f1b969 (Actual: 0x01f1b969) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | OK |
Imports |
7 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, ole32, OLEAUT32, bcrypt |
Exports | 1 functions |
Resources | 25 Resources |
Sections | 5 Sections |
CompanyName | Successful River |
FileDescription | Digital clock 5 Successful River |
FileVersion | 1.0.0.0 |
ProductVersion | 1.0.0.0 |
LegalCopyright | Copyright 2010-2024 Successful River |
ProductName | Digital clock 5 Successful River |
Translation | 0x0409 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
3,922,061 bytes | 3,922,432 bytes | 5.68 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
59EF1BCD76DB8B0F1B29B4B0B7D39659 |
.rdata |
0x003bf000 |
160,175 bytes | 160,256 bytes | 5.50 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
9936F7E59C77067384663B0E1B74F025 |
.data |
0x003e7000 |
33,892 bytes | 7,680 bytes | 3.83 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
A8315AFED159E405BEB5A07C5CD6561C |
.rsrc |
0x003f0000 |
9,528 bytes | 9,728 bytes | 3.83 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
AEFB92841316429E8333D84D58AF529E |
.reloc |
0x003f3000 |
87,078 bytes | 87,552 bytes | 4.91 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
EF1538A6D5D88B18AC4842BDF4C2C2E3 |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_ICON | 2 | 1,040 bytes | |
RT_DIALOG | 4 | 2,048 bytes | |
RT_STRING | 16 | 2,766 bytes | |
RT_GROUP_ICON | 1 | 34 bytes | |
RT_VERSION | 1 | 708 bytes | |
RT_MANIFEST | 1 | 1,502 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
OK
Gridinsoft has the capability to identify and eliminate Malware.Win32.Snackarcin.bot without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system