Gridinsoft Logo
File Icon

GetCode.exe Trojan Gen Analysis

Updated 3 months ago
Checked by Malaware Check
GetCode.exe

Technical Analysis

File Name GetCode.exe
File Type
MS-DOS executable PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Scanner Version 1.0.209.174
Database Version 2025-03-02 23:00:39 UTC
⚠

Trojan.Win64.Gen.cld

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
67,584
File Size (bytes)
2025-03-02
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
24e50979dd4d1ece105a3146eee1bad0
SHA1
8783b99398af32d87f6da23a3623a8581f9cf8f7
SHA256
4acb3272fc724c41d230342028f3e7877101ce7f75778b8714145d8c93254228
SHA512
a1211a233c3a04a0a9d9ab20741927dab17d48103741646cc6ec762abce91e51ed7ff2538c4e247915c4762473a7ea16530f9dc7d9d3aa6795f01f77749a3bf1
ImpHash
116fd7f8c7a6fd5a7e21efb73d3d11dd

PE Analysis

Basic Information

▼
Icon
Hash: f66c7c86e9ab59ef3f289acd613a3738
Fuzzy: c3ca946d749a15ad18efd3e5d7b0d8f5
dHash: 454545d4d4d44503
Image Base 0x00400000
Entry Point 0x004402a0
Compilation Time 2022-10-27 11:49:19
Checksum 0x00000000 (Actual: 0x0001c8c6)
OS Version 5.2
PEiD Signatures MS-DOS executable PE32+ executable (GUI) x86-64 (stripped to external PDB), for MS Windows, MZ for MS-DOS
Digital Signature No valid SignedData structure was found.
Imports 6 libraries
KERNEL32, oleaut32, advapi32, user32, version, netapi32
Exports 2 functions
Resources 17 Resources
Sections 3 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.MPRESS1 0x00001000 258,048 bytes 49,664 bytes 8.00 (Packed/Encrypted) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 44FAFA4A1D5D4FD3DB29267B3BD3349B
.MPRESS2 0x00040000 4,076 bytes 4,096 bytes 5.41 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE A0F4CB7F62C9C8F0BFCD83573B31D8CE
.rsrc 0x00041000 13,196 bytes 13,312 bytes 3.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9BA15B0D6A4D4D04069CD0754477C561
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 17 (15,890 bytes)
Resource Type Count Total Size Percentage
RT_ICON 7 10,883 bytes
68.5%
RT_STRING 7 3,700 bytes
23.3%
RT_RCDATA 1 2 bytes
0%
RT_GROUP_ICON 1 104 bytes
0.7%
RT_MANIFEST 1 1,201 bytes
7.6%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Win64.Gen.cld Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win64.Gen.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware