File Name | SkipFrames.asi |
File Type |
PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
|
Scanner Version | 1.0.212.174 |
Database Version | 2025-04-02 20:00:34 UTC |
Malware family: Heuristic
Hash Type | Value | Action |
---|---|---|
MD5 |
fd021df0dcd2b37b2a0cbe976f8bf5c8
|
|
SHA1 |
4ad3edaaa4d437c8a74d403573530b01f4f215f0
|
|
SHA256 |
4465dbc5f6222349b80b3e2b7c20f036453b310a2c5729cba9dfe961075e2abd
|
|
SHA512 |
a1ada1ce847438dcacf87097e3c38da7ae368acf2a78484762b0d8f20789c41e27b5feec4a76bd5e1c05e92d564d59455eb2be38ee0e37f3d9a717429dd0ca35
|
|
ImpHash |
0b0be73ed07c8c2732f0a85e4b889085
|
Image Base | 0x10000000 |
Entry Point | 0x1001d200 |
Compilation Time | 2020-11-21 12:14:41 |
Checksum | 0x00000000 (Actual: 0x0001891f) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (DLL) (console) Intel 80386, for MS Windows, UPX compressed
|
Digital Signature | No valid SignedData structure was found. |
Imports |
2 libraries
KERNEL32, USER32 |
Exports | 1 functions |
Resources | 1 Resources |
Sections | 3 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
UPX0 |
0x00001000 |
73,728 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
UPX1 |
0x00013000 |
45,056 bytes | 42,496 bytes | 7.88 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
CDE504BCD60D983E9C70BCFE3B1A3AAF |
.rsrc |
0x0001e000 |
4,096 bytes | 1,024 bytes | 4.09 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
0F51A02B6F72ED885676A05309719BA1 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_MANIFEST | 1 | 381 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Heuristic.cl without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system