Petitepacked_ztext.exe Trojan Gen Analysis
| Online Virus Checker | v.1.0.177.174 |
| DB Version: | 2024-05-23 23:00:19 |
Trojan.Win32.Gen.cld
This is a generic detection name used to identify a potentially harmful or suspicious file or program that exhibits characteristics of a Trojan horse. It is malware that disguises itself as a legitimate or benign program but contains malicious code or functions.
| File | petitepacked_ztext.exe |
| Checked | 2024-05-23 20:32:50 |
| MD5 | bdce62e3ca2c530ce96653a6bfd86a8c |
| SHA1 | cfe2dc78d99f9c14a18bd3991da3bb3b0b3dbf75 |
| SHA256 | 5f5a2c5b03c2958838086e6bca1dfb4f061d1a36d2f0c4b56493e0cf34f9b014 |
| SHA512 | 24669cf94ac0c0bc7da726ac78d96bfd74e87b72cc3bcfaaa9e601864564ce0410cda78781fa5c702d742746726315ab849c9834cfc9dd0613f85262fb55d89e |
| Imphash | 9d76e1d63ce211c25cdcbb5cfd050234 |
| File Size | 77824 bytes |
Trojan.Win32.Gen.cld Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Gen.cld without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
| Image Base: | 0x00400000 |
| Entry Point: | 0x0042610b |
| Compilation: | 2017-02-27 17:53:50 |
| Checksum: | 0x0002bf9c (Actual: 0x00022f1b) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows, Petite compressed |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 8 |
| Imports: | kernel32, user32, advapi32, oleaut32, |
| Exports: | 0 |
| Resources: | 9 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .petite | 0x00001000 | 0x0001d000 | 0x0000fc00 | 23b15d995dc4e9629ba5efb4b73c2b6e | 7.99 |
| 0x0001e000 | 0x00001000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x0001f000 | 0x00001000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x00020000 | 0x00001000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x00021000 | 0x00001000 | 0x00000200 | 9d046fba960ddb8c358031fbcfc816d7 | 0.17 | |
| 0x00022000 | 0x00002000 | 0x00000000 | d41d8cd98f00b204e9800998ecf8427e | 0.00 | |
| 0x00024000 | 0x00002000 | 0x00001400 | 60e461cb3f1431783d701c1a6f3e3eb4 | 3.39 | |
| 0x00026000 | 0x000018e7 | 0x00001a00 | a8b8f2459a1ef59dbc3c7dcc14b01689 | 6.31 |
