Gridinsoft Logo
File Icon

DOOM Eternal v1.0-v6.66 Plus 20 Trainer.exe Malware GenericMC Analysis

Updated 12 months ago
Checked by Malware Check
DOOM Eternal v1.0-v6.66 Plus 20 Trainer.exe

Technical Analysis

File Name DOOM Eternal v1.0-v6.66 Plus 20 Trainer.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.179.174
Database Version 2024-06-20 01:00:34 UTC
⚠

Malware.Win64.GenericMC.cc

Malware family: GenericMC

This generic detection covers files showing Trojan horse indicators. It identifies malware that appears legitimate but contains hidden malicious functionality designed to compromise system integrity or user data.
N/A
Detection Rate
1,163,776
File Size (bytes)
2024-06-20
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
cc63fa843ab94603b970a6e653f4f13b
SHA1
6fd8e1fc257153926c2e499b0663b3cdbebd5b34
SHA256
6d64edfae65a6cd656ef6cdb9e1a477de984f224e72ae3b3e6fdee9b33ed7f71
SHA512
ba2d92beee1a74bffd45ef8b56eed59da79d61ec9ebee01bbc2c35986be7569d9ed78ac3063c5e5f67a64b7eb96ac87f939757e7a20c22bf0b194b2aefc2db8b
ImpHash
6f120260d16669929176b1edaa6880bd

PE Analysis

Basic Information

▼
Icon
Hash: 7249d5fc6221a5b21411aa2ad27aa387
Fuzzy: a1c738eea59667290c83d00f50a19604
dHash: 70f8fc7a7e2eaa70
Image Base 0x140000000
Entry Point 0x1400292e0
Compilation Time 2021-10-29 22:41:37
Checksum 0x00000000 (Actual: 0x00129dda)
OS Version 6.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature The PE file does not contain a certificate table.
Imports 9 libraries
KERNEL32, USER32, ADVAPI32, SHELL32, OLEAUT32, mscoree, WININET, VERSION, WINMM
Exports 0 functions
Resources 12 Resources
Sections 7 Sections

Version Information

▼
CompanyName 3DMGAME
FileDescription DOOM Eternal v1.0-v6.66 Plus 20 Trainer
FileVersion 1.0.0.0
InternalName DOOM Eternal v1.0-v6.66 Plus 20 Trainer
LegalCopyright FLiNG Copyright (C) 2021
OriginalFilename DOOM Eternal v1.0-v6.66 Plus 20 Trainer.exe
ProductName DOOM Eternal v1.0-v6.66 Plus 20 Trainer
ProductVersion 1.0.738.8
Translation 0x0000 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 322,256 bytes 322,560 bytes 6.44 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 744333CFBF8A1E1BE20A3984ED7738A2
.rdata 0x00050000 121,600 bytes 121,856 bytes 5.33 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ AF403E4FB2BA435A69B0E4A5D995EB95
.data 0x0006e000 14,860 bytes 6,144 bytes 3.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 0BE332C71AF3FD80078AC6EF79C5C84B
.pdata 0x00072000 15,408 bytes 15,872 bytes 5.58 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 73C25DA4E3A8636DE7B8E41704116C2C
_RDATA 0x00076000 252 bytes 512 bytes 2.45 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 6610494CCC0DFBDED6B900CB8A4325D4
.rsrc 0x00077000 692,664 bytes 692,736 bytes 7.34 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 0D9F60CE07E05AB1488DFCCBFFE334BB
.reloc 0x00121000 2,772 bytes 3,072 bytes 5.23 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ DAF7B1A2332E1068BF54B26BD1EAD85B
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 12 (691,800 bytes)
Resource Type Count Total Size Percentage
COVER 1 88,377 bytes
12.8%
REMOTE 2 308,228 bytes
44.6%
UI 1 181,248 bytes
26.2%
WAVE 2 22,222 bytes
3.2%
RT_ICON 3 90,092 bytes
13%
RT_GROUP_ICON 1 48 bytes
0%
RT_VERSION 1 932 bytes
0.1%
RT_MANIFEST 1 653 bytes
0.1%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The PE file does not contain a certificate table.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win64.GenericMC.cc Removal

Gridinsoft has the capability to identify and eliminate Malware.Win64.GenericMC.cc without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware