Kadick.exe Trojan Agent Analysis
| Online Virus Checker | v.1.0.181.174 |
| DB Version: | 2024-07-02 22:00:22 |
Trojan.Win64.Agent.sa
Trojan Agent is malicious software that masquerades as legitimate files or programs to carry out various harmful actions on infected computers, such as data theft or remote control by cybercriminals.
| File | kadick.exe |
| Checked | 2024-07-02 19:39:36 |
| MD5 | 832a8921f432a1609ae91fd1ab42a351 |
| SHA1 | a51f932ef588341fff75b57797f8029b136c51c7 |
| SHA256 | 4bf3dba7b67e30c1aeb0e28991793a7b5841e4bf6acc4d8b2b64937621bc0ea6 |
| SHA512 | e42d7f63e88b57d746289295a385ca69a6a7f41dd8a2e552cd07c7623bbdde39a272506ac1fc726d59db7701c3d752afdd83438b673eed078dba2ce328478f9e |
| Imphash | 5bc16b5845145eb0edb88983820691b1 |
| File Size | 33332712 bytes |
Trojan.Win64.Agent.sa Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win64.Agent.sa without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
 |
fb460346f66714e824fcadddffea7970 7f94b7761e18b4762a1a263f78b90141 aebc385ccce0e8f8 |
| Image Base: | 0x140000000 |
| Entry Point: | 0x14000b220 |
| Compilation: | 2024-07-01 10:18:39 |
| Checksum: | 0x01fd5b21 (Actual: 0x01fd5b21) |
| OS Version: | 5.2 |
| PEiD: | PE32+ executable (console) x86-64, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | USER32, KERNEL32, ADVAPI32, |
| Exports: | 0 |
| Resources: | 9 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0002a000 | 0x0002a000 | 62fe41b4e58114ff6c80897e1c968530 | 6.50 |
| .rdata | 0x0002b000 | 0x00012290 | 0x00012400 | a6c5779c05e3fa5942df34618a549d29 | 5.77 |
| .data | 0x0003e000 | 0x000073d8 | 0x00000e00 | 4ceddbdd41b6c38e6c32765c1c3f16ea | 1.84 |
| .pdata | 0x00046000 | 0x00002280 | 0x00002400 | 63f39e3ac219728e4bd78079c5185c9d | 5.28 |
| .rsrc | 0x00049000 | 0x0000ef8c | 0x0000f000 | 5d72e0338b034862f777c781ab7d2219 | 7.35 |
| .reloc | 0x00058000 | 0x00000768 | 0x00000800 | 943c066a6a5cfed98e0d4305f5e9ea02 | 5.21 |
