File Name | fist.exe |
File Type |
PE32 executable (console) Intel 80386, for MS Windows
|
Scanner Version | 1.0.194.174 |
Database Version | 2024-10-23 00:00:26 UTC |
Malware family: Generic
Hash Type | Value | Action |
---|---|---|
MD5 |
55f5afd856e908bfffc46fbd1f6d4517
|
|
SHA1 |
3890673480f9d3e63dbe05c96dac200f5fd2e2d5
|
|
SHA256 |
77284df21c347e67e04425f678b5d0913bacd2c9726d332f7a1859edd9ff29f2
|
|
SHA512 |
92974fea6db3d7fbe611946a673b9a9b9cdfc8ee0ef73754a50b9c2ede1436cf30b8ccda06159f7ccbf5106575e4d48977c2240c7ed796f9a225a196f9a3c45f
|
|
ImpHash |
97a2f47bcfbce5c4236060add27e1931
|
Image Base | 0x00400000 |
Entry Point | 0x00401000 |
Compilation Time | 2017-02-21 23:54:21 |
Checksum | 0x00000000 (Actual: 0x00010d1d) |
OS Version | 4.0 |
PEiD Signatures |
PE32 executable (console) Intel 80386, for MS Windows
|
Digital Signature | No valid SignedData structure was found. |
Imports |
3 libraries
MSVCRT, KERNEL32, USER32 |
Exports | 0 functions |
Resources | 0 Resources |
Sections | 4 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.code |
0x00001000 |
5,036 bytes | 5,120 bytes | 5.58 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
958E0D4AA785C6703FF19D38D0C00DBF |
.text |
0x00003000 |
6,652 bytes | 6,656 bytes | 6.30 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
FF386AC782FC6AE0DA5D4CA115035735 |
.rdata |
0x00005000 |
1,040 bytes | 1,536 bytes | 6.09 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
8468D8D6FF960A9B71AD14C8B884DE94 |
.data |
0x00006000 |
2,276 bytes | 2,560 bytes | 3.87 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
BD98CC6B3C7E16BF905D69784E36CFCE |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
No valid SignedData structure was found.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win32.Generic.cld without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system
A
Oct 23, 2024
It's a generic patcher I wrote. It can change bytes in files, since it's a patcher, that's the main function of a patcher. Does not drop anything itself.