Gridinsoft Logo
File Icon

WarRock External Software [New Update].exe Trojan Heuristic Analysis

Updated 5 days ago
Checked by Malware Check
WarRock External Software [New Update].exe

Technical Analysis

File Name WarRock External Software [New Update].exe
File Type
PE32 executable (console) Intel 80386, for MS Windows
Scanner Version 1.0.220.174
Database Version 2025-07-10 23:00:17 UTC
⚠

Trojan.Heur!.02212021

Malware family: Heuristic

Heuristic detection uses behavioral analysis and pattern recognition to identify potential threats without specific signatures. This proactive approach detects suspicious code behavior that may indicate malware presence. Detection may occasionally produce false positives when legitimate software exhibits similar behavioral patterns.
N/A
Detection Rate
19,838,464
File Size (bytes)
2025-07-10
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
bba88bf08cdbf76f4d85c03b827a6117
SHA1
c6112860748c568a0ef56cd229e17715821ed097
SHA256
2a19393df9a73bc1fe2e096273fdf672c31e03672861cb1a35aca6337d8d7aec
SHA512
94a4d96b21c36d4d6e51656a097e050b750d0b8416fd7f9b594e44de5019f8263eef1e773334a8b0dc339b9aa0ca47095dc4b3b98a0c5a121ab5781cede7a608
ImpHash
9b82efc56c9935edc3aa4794d138006a

PE Analysis

Basic Information

▼
Icon
Hash: f0b70339a4ece1b3ddfadae4bd75e387
Fuzzy: 2cff7be3f3a40597c2c6a876293aa990
dHash: e6c74f67733c7ce6
Image Base 0x00400000
Entry Point 0x00ed62d6
Compilation Time 2024-09-25 04:56:25
Checksum 0x00000000 (Actual: 0x012f535d)
OS Version 6.0
PEiD Signatures PE32 executable (console) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 17 libraries
Exports 0 functions
Resources 10 Resources
Sections 7 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 362,998 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.rdata 0x0005a000 124,372 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.data 0x00079000 70,020 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.202440 0x0008b000 10,687,348 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ D41D8CD98F00B204E9800998ECF8427E
.202441 0x00abd000 1,716 bytes 2,048 bytes 0.46 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B26943859010431A83187F900F99E96F
.202442 0x00abe000 19,423,344 bytes 19,423,744 bytes 7.86 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 8E96F66F4D113099CD69154F0748126C
.rsrc 0x01d45000 411,544 bytes 411,648 bytes 6.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 06B4F01A2776CB758BB3128CFDB8F59E
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 10 (410,974 bytes)
Resource Type Count Total Size Percentage
RT_ICON 8 410,464 bytes
99.9%
RT_GROUP_ICON 1 118 bytes
0%
RT_MANIFEST 1 392 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Heur!.02212021 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Heur!.02212021 without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware