Gridinsoft Logo

77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5.exe Malware Gen Analysis

Updated 8 months ago
Checked by Malware Check
77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5.exe

Technical Analysis

File Name 77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5.exe
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.193.174
Database Version 2024-10-18 20:00:23 UTC
⚠

Malware.Win64.Gen.tr

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
279,552
File Size (bytes)
2024-10-18
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7733dafc9969cfd5820c488c3af0ab61
SHA1
187d7c003f70be4c959739a64e65435bc6982cd5
SHA256
77836c0b18bbfef70fd04ba674ea045bf109851efe76ae9bcc55c2dcd08cc3c5
SHA512
e57df61e2935a553032a0df3cd8458c0e147024c302a78ddc62946bf0a8d2bc44f033d47c347073f4cbec34dafc9a9d4c54acda50d2c6714b5d38b2a2815680e

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x180001360
Compilation Time 2024-10-16 12:27:25
Checksum 0x00000000 (Actual: 0x0004ba53)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 0
Exports 1 functions
Resources 1 Resources
Sections 5 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 156,642 bytes 156,672 bytes 6.82 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 7287EBA30420316AE892CD443C1961A8
.rdata 0x00028000 204 bytes 512 bytes 2.48 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ B42ED26044A97E419C096B97DC65E570
.data 0x00029000 119,960 bytes 120,320 bytes 7.73 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F63899DD9BFF38C1E55CAC4A39F08765
.pdata 0x00047000 72 bytes 512 bytes 0.89 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 4DC3A7A7E8F4FCC7B6CBAC3D6678A0AE
.rsrc 0x00048000 424 bytes 512 bytes 4.18 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 638083D16EC6D4F1388B738B4DF1D58F
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 1 (323 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 323 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win64.Gen.tr Removal

Gridinsoft has the capability to identify and eliminate Malware.Win64.Gen.tr without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware