Gridinsoft Logo
File Icon

Banana Raider.exe Malware Generic Analysis

Updated 0 second ago
Checked by Malaware Check
Banana Raider.exe

Technical Analysis

File Name Banana Raider.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.217.174
Database Version 2025-06-06 04:00:44 UTC
⚠

Malware.Win64.Generic.cld

Malware family: Generic

This detection name identifies suspicious files displaying Trojan-like behavior patterns. It represents malware that masquerades as benign programs while executing unauthorized activities on the infected system.
N/A
Detection Rate
7,880,014
File Size (bytes)
2025-06-06
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
20b01c19d0cbd82d26206e105920448a
SHA1
c881a72eda84df6a0ad7ade3d55561a6351cc89e
SHA256
280594e50d6cf1ba24c8828b6774e637861de5a3da7b4e1116cfd23e655f058b
SHA512
fb8f1e8199cbc0ec9c8c301f6002a94420493dcedf749975eecbd1d535e674a85e47714574341bdaded0721f3760c497f515fa23615e897161d85b7f2738d774
ImpHash
72c4e339b7af8ab1ed2eb3821c98713a

PE Analysis

Basic Information

▼
Icon
Hash: ddf728c4320b4155bd592a6cf9aa610c
Fuzzy: 66e4b2c1989cee682d9b9bb0530e413c
dHash: e0f0d496b296cc70
Image Base 0x140000000
Entry Point 0x14000ce20
Compilation Time 2025-02-03 14:27:05
Checksum 0x00784626 (Actual: 0x00787da8)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 5 libraries
USER32, COMCTL32, KERNEL32, ADVAPI32, GDI32
Exports 0 functions
Resources 10 Resources
Sections 6 Sections

Version Information

▼
CompanyName Microsoft Corporation
FileDescription File Picker UI Host
FileVersion 10.0.19041.4355 (WinBuild.160101.0800)
InternalName PickerHost
LegalCopyright © Microsoft Corporation. All rights reserved.
OriginalFilename PickerHost.exe
ProductName Microsoft® Windows® Operating System
ProductVersion 10.0.19041.4355
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 171,888 bytes 172,032 bytes 6.49 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B8C3814C5FB0B18492AD4EC2FFE0830A
.rdata 0x0002b000 76,328 bytes 76,800 bytes 5.75 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FA40BFFC5FAF3866E35F8C33FE4CD2A8
.data 0x0003e000 21,496 bytes 3,584 bytes 1.84 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE DBA0CAEECAB624A0CCC0D577241601D1
.pdata 0x00044000 8,760 bytes 9,216 bytes 5.26 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 9CD1EAC931545F28AB09329F8BFCE843
.rsrc 0x00047000 101,080 bytes 101,376 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 60BB704A8BB7E304C2417239A88F5551
.reloc 0x00060000 1,892 bytes 2,048 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 816C68EEB419EE2C08656C31C06A0FFF
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 10 (100,475 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 98,158 bytes
97.7%
RT_GROUP_ICON 1 104 bytes
0.1%
RT_VERSION 1 920 bytes
0.9%
RT_MANIFEST 1 1,293 bytes
1.3%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win64.Generic.cld Removal

Gridinsoft has the capability to identify and eliminate Malware.Win64.Generic.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware