Gridinsoft Logo

The samnlone.exe.exe File Analysis

Updated 6 minutes ago
Checked by Malware Check
samnlone.exe.exe

Technical Analysis

File Name samnlone.exe.exe
File Type
Win32 EXE
Magic Bytes PE32+ executable (console) x86-64, for MS Windows
SSDEEP Hash
1536:tyokIXhQW2P1f4/xg4gEAHXPJVfCvWhLpM5z7PSC+M42aruINDdCDUDSdSAXy:AdInu1f4/DAraRRwuUuy
Scanner Version 1.0.218.174
Database Version 2025-06-16 17:00:23 UTC
⚠

Suspicious File Detected

Detected by 40 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.
56%
Detection Rate
120,356
File Size (bytes)
40/72
Engines Detected
2025-06-16
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
15ef7f9648069e03129cac7b3aee4227
SHA1
b1c0f69b9af65af0f3bfaec713faa5a673cabc0c
SHA256
39598cf2cdc0e78e0cd48ba3afab169c2784e0e2b25f78787af9df80bbcb951e
SHA512
42b53d964c9126552c54fe3e0e8130f729be97da55de949791dd57cda14941203ffb017094da909ae9dcfd04460594ba0a3fa6a785d39d40fd6c0a5d4620a70d
ImpHash
aea7c670b35dddfc60672e64c8269430

Security Engines with Detections (40 of 72)

Lionic
Trojan.Win32.BadJoke.4!c Malicious
MicroWorld-eScan
Trojan.GenericKD.73394154 Malicious
CTX
exe.trojan.badjoke Malicious
CAT-QuickHeal
Trojan.Ghanarava.1728875097ee4227 Malicious
ALYac
Trojan.GenericKD.73394154 Malicious
Cylance
Unsafe Malicious
Sangfor
Trojan.Win32.Badjoke.V07q Malicious
K7AntiVirus
Trojan ( 005c4f231 ) Malicious
K7GW
Trojan ( 005c4f231 ) Malicious
CrowdStrike
win/malicious_confidence_60% (W) Malicious
Symantec
ML.Attribute.HighConfidence Malicious
ESET-NOD32
a variant of Win64/BadJoke.DP Malicious
TrendMicro-HouseCall
TROJ_GEN.R002H09B525 Malicious
Paloalto
generic.ml Malicious
BitDefender
Trojan.GenericKD.73394154 Malicious
ViRobot
Trojan.Win.Z.Agent.120356 Malicious
Avast
Win64:Malware-gen Malicious
Tencent
Malware.Win32.Gencirc.11e0dadf Malicious
Emsisoft
Trojan.GenericKD.73394154 (B) Malicious
Google
Detected Malicious
F-Secure
Trojan.TR/BadJoke.rghtw Malicious
VIPRE
Trojan.GenericKD.73394154 Malicious
McAfeeD
ti!39598CF2CDC0 Malicious
Sophos
Mal/Generic-S Malicious
Ikarus
Trojan.Win64.Agent Malicious
GData
Trojan.GenericKD.73394154 Malicious
Varist
W64/ABTrojan.SJDX-8867 Malicious
Avira
TR/BadJoke.rghtw Malicious
Arcabit
Trojan.Generic.D45FE7EA Malicious
Microsoft
Trojan:Win32/Wacatac.B!ml Malicious
Cynet
Malicious (score: 99) Malicious
AhnLab-V3
Malware/Win.Generic.C5613432 Malicious
Malwarebytes
Malware.AI.928645423 Malicious
Panda
Trj/Chgt.AD Malicious
Rising
Trojan.BadJoke!8.EDE4 (CLOUD) Malicious
TrellixENS
Artemis!15EF7F964806 Malicious
MaxSecure
Trojan.Malware.281982927.susgen Malicious
Fortinet
PossibleThreat.PALLAS.H Malicious
AVG
Win64:Malware-gen Malicious
alibabacloud
Suspicious Malicious
32 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400013f0
Compilation Time 2024-03-10 13:11:50
Checksum 0x00028507 (Actual: 0x00028507)
OS Version 4.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 4 libraries
GDI32, KERNEL32, msvcrt, USER32
Exports 0 functions
Resources 1 Resources
Sections 20 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 6,200 bytes 6,656 bytes 5.78 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 51499DB994FE68E0BDB32ECB6F31D31B
.data 0x00003000 144 bytes 512 bytes 0.62 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C188D13A495E0C47E43AD67EF83C2DC9
.rdata 0x00004000 2,672 bytes 3,072 bytes 4.43 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ CE7DF63139F07D5B616817CB365E48C8
.pdata 0x00005000 528 bytes 1,024 bytes 2.27 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 8DB4AE02B40579562ADB4E383E29ED28
.xdata 0x00006000 400 bytes 512 bytes 3.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ FF5FE41AE4ECCC73E8C16AE8AD56EB52
.bss 0x00007000 384 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x00008000 1,548 bytes 2,048 bytes 3.11 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE AFE8F1886DE0B386A2F6D80E481DCC48
.CRT 0x00009000 96 bytes 512 bytes 0.29 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D444DD077893A7DD7CFCB079EAB87858
.tls 0x0000a000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.rsrc 0x0000b000 1,256 bytes 1,536 bytes 4.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3B7F4D778DD55680650E27DDD712B430
.reloc 0x0000c000 120 bytes 512 bytes 1.40 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 07F51FF36A8D1CEBB4BC050530906813
/4 0x0000d000 1,040 bytes 1,536 bytes 1.21 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E626243F92FD3F165E43A06BCAA2E6F7
/19 0x0000e000 39,798 bytes 39,936 bytes 5.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 0897336143B96F906B84119B232743E2
/31 0x00018000 7,177 bytes 7,680 bytes 4.68 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C8877FDD09A5C9324162CE9ED596F07B
/45 0x0001a000 7,062 bytes 7,168 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 90C9192D59198FAA36C2533055E663CB
/57 0x0001c000 2,032 bytes 2,048 bytes 4.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 341A11EB9B87826FD9F39CCB186875F7
/70 0x0001d000 707 bytes 1,024 bytes 3.99 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ DBAA2ADF62FAA5FBE5D8255C67238D2B
/81 0x0001e000 5,472 bytes 5,632 bytes 4.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ E3AC0F715C8FC3B129AA2B1449E8C933
/97 0x00020000 4,604 bytes 4,608 bytes 5.10 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 380CEC23FA7A85A54996E74F3D42841B
/113 0x00022000 405 bytes 512 bytes 4.12 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ A009753C265146998D9DF0F793FA87C8

Resource Analysis

▼
Total Resources: 1 (1,167 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 1,167 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
40 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware