Gridinsoft Logo

File.exe Trojan Amadey Analysis

Trojan Amadey
Updated on 2024-11-05 (1 month ago)
Checked by Online Virus Scanner
Online Virus Checker v.1.0.195.174
DB Version: 2024-11-05 02:00:24

Trojan.Win32.Amadey.tr

Amadey is a formidable Windows infostealer threat, characterized by its persistence mechanisms, modular design, and ability to execute various malicious tasks. It typically infiltrates systems through phishing emails or malicious downloads. Once inside a system, Amadey can capture sensitive information such as login credentials, personal data, and financial details. Its modular structure allows threat actors to customize its functionality, making it a versatile tool in cybercriminal arsenals.

File file.exe
Checked 2024-11-05 00:08:53
MD5 4316e6bfa31a0f5639ab60ad32c2f672
SHA1 cc0a14bd5b282fa1963c11fb3a0cbf576f463357
SHA256 28c789c3953a7383ef6d9876e2aaf5bb91393b0be4b8c8919845a2428920e751
SHA512 1b2f69c509fc5b02494b465eab37aa2fa41bd738ba9cf4b19cdd562fd16ea10c58bbca56e2c7ffa8dc2052235b8ee6670bf8e1578faa2f1892be9f51466014fb
Imphash 2eabe9054cad5152567f0699947a2c5b
File Size 3288064 bytes

Trojan.Win32.Amadey.tr Removal

Trojan.Win32.Amadey.tr Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.Amadey.tr without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

Image Base: 0x00400000
Entry Point: 0x00723000
Compilation: 2024-09-22 17:40:44
Checksum: 0x0032a91f (Actual: 0x00329de2)
OS Version: 6.0
PEiD: PE32 executable (GUI) Intel 80386, for MS Windows
Sign: No valid SignedData structure was found.
Sections: 6
Imports: kernel32,
Exports: 0
Resources: 1

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
0x00001000 0x00068000 0x00068000 44bf8f2a70fab40b0a741666f7e3eb10 7.11
.rsrc 0x00069000 0x000001e0 0x00000200 b7d16686b376821266a9345c26b7e6d6 4.72
.idata 0x0006a000 0x00001000 0x00000200 cc76e3822efdc911f469a3e3cc9ce9fe 1.04
fknmyouv 0x0006b000 0x002b7000 0x002b7000 e81262a109f7c8588f9e3fdda1c7a9fa 6.40
oavxjruv 0x00322000 0x00001000 0x00000600 d4d77aa7bb1f3fc5116718fef4251411 5.16
.taggant 0x00323000 0x00003000 0x00002200 a188b463d9ba56881569b19c023a14b3 0.70

Leave a comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware