JDKeygen.exe Trojan Gen Analysis
| Online Virus Checker | v.1.0.174.174 |
| DB Version: | 2024-05-05 17:00:27 |
Trojan.Win32.Gen.oa
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| File | JDKeygen.exe |
| Checked | 2024-05-05 17:32:32 |
| MD5 | 33e7502fe12d1f8b536fc0646ba5c82e |
| SHA1 | ef5984a448e9b418cb4b55ca3c8d8bc93068b169 |
| SHA256 | 50c9382ac1c200bc95c4a43bbbd138a756d55ced8e3e8af8f8417e1be3ede0e8 |
| SHA512 | 5602bf6713eb5ae54328c1c951f82c93655beffde18841488388b8c04bcdf25b69c55dc42c4eda12b39d07660a2012ca746914a16781b6345d016fac07ff9207 |
| Imphash | f34d5f2d4577ed6d9ceec516c1f5a744 |
| File Size | 117760 bytes |
Trojan.Win32.Gen.oa Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Gen.oa without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
File Version Information
| Translation | 0x0000 0x04b0 |
| FileDescription | JDKeygen |
| FileVersion | 1.0.0.0 |
| InternalName | JDKeygen.exe |
| LegalCopyright | Copyright © 2016 |
| OriginalFilename | JDKeygen.exe |
| ProductName | JDKeygen |
| ProductVersion | 1.0.0.0 |
| Assembly Version | 1.0.0.0 |
Portable Executable Info
 |
aa753b35533ac2113e6af4ec6e3019c6 6b5a3cf71b774ced8b0b31ca5d1ac0d6 b96d71b052525252 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x0042400a |
| Compilation: | 2016-06-16 11:06:55 |
| Checksum: | 0x00000000 (Actual: 0x000253de) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 5 |
| Imports: | mscoree, |
| Exports: | 0 |
| Resources: | 13 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| Q~YL<;. | 0x00002000 | 0x0000704c | 0x00007200 | ef5c50f08c8c6f0a4843308f19d01663 | 7.99 |
| .text | 0x0000a000 | 0x00008918 | 0x00008a00 | 89fd8795d241326ced4770b955a9647f | 4.96 |
| .rsrc | 0x00014000 | 0x0000c7a0 | 0x0000c800 | 12408d8f04050816a630cc162c80b087 | 5.87 |
| .reloc | 0x00022000 | 0x0000000c | 0x00000200 | 3418ed3940fad3d2428cc0b4f357943b | 0.10 |
| 0x00024000 | 0x00000010 | 0x00000200 | f6f8588671c2ad0137803f02061778a3 | 0.12 |
