File Name | Ace Combat 7 Skies Unknown v1.0-v20211019 Plus 11 Trainer.exe |
File Type |
PE32+ executable (GUI) x86-64, for MS Windows
|
Scanner Version | 1.0.174.174 |
Database Version | 2024-05-03 01:00:32 UTC |
Malware family: GenericMC
Hash Type | Value | Action |
---|---|---|
MD5 |
326492299057da2fa2c12e4563da6c21
|
|
SHA1 |
7a73e0b2039bc4fa024f581b7c40c9350111e6f9
|
|
SHA256 |
7a6944010143b57d4183d7d18ac477531c3161293a4acb87d8d7421b910f7a42
|
|
SHA512 |
1927e1e1459ec28f046ae6333c8ee1d4786bc2ae73215fe2d5082b7b618a37b5b35b61464d00fdc30f0425019c924e5df2a8887500da2aef1c2023a117560c06
|
|
ImpHash |
17a81f8724789d29c0c593980acf0758
|
Icon |
Hash: 7249d5fc6221a5b21411aa2ad27aa387
Fuzzy: a1c738eea59667290c83d00f50a19604 dHash: 70f8fc7a7e2eaa70 |
Image Base | 0x140000000 |
Entry Point | 0x1400273b0 |
Compilation Time | 2021-10-19 04:54:19 |
Checksum | 0x00000000 (Actual: 0x000cf91a) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (GUI) x86-64, for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
8 libraries
KERNEL32, USER32, SHELL32, OLEAUT32, mscoree, WININET, VERSION, WINMM |
Exports | 0 functions |
Resources | 11 Resources |
Sections | 7 Sections |
CompanyName | 3DMGAME |
FileDescription | Ace Combat 7 Skies Unknown v1.0-v20211019 Plus 11 Trainer |
FileVersion | 1.0.0.0 |
InternalName | Ace Combat 7 Skies Unknown v1.0-v20211019 Plus 11 Trainer |
LegalCopyright | FLiNG Copyright (C) 2020 |
OriginalFilename | Ace Combat 7 Skies Unknown v1.0-v20211019 Plus 11 Trainer.exe |
ProductName | Ace Combat 7 Skies Unknown v1.0-v20211019 Plus 11 Trainer |
ProductVersion | 1.0.622.4 |
Translation | 0x0000 0x04b0 |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
313,600 bytes | 313,856 bytes | 6.44 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
6E187C41D6EAE65AD268CD228D36B500 |
.rdata |
0x0004e000 |
118,252 bytes | 118,272 bytes | 5.31 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
46273AA39987CE7B082C42F04041A55C |
.data |
0x0006b000 |
14,860 bytes | 6,144 bytes | 3.20 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
0589FC7CEEA59B3219328A6288ACB426 |
.pdata |
0x0006f000 |
15,216 bytes | 15,360 bytes | 5.64 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
872EBDD71A86AF7852D96B07B6DA6D6A |
_RDATA |
0x00073000 |
252 bytes | 512 bytes | 2.40 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
B19E08AD5F57252729F6E82767B0B7CA |
.rsrc |
0x00074000 |
346,152 bytes | 346,624 bytes | 7.87 (Packed/Encrypted) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D0F3AB97491EF681E4608DD43E5BFEB9 |
.reloc |
0x000c9000 |
2,764 bytes | 3,072 bytes | 5.23 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
E9426C010F497CA3187347E3D8703D7F |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
COVER | 1 | 49,993 bytes | |
REMOTE | 1 | 4 bytes | |
UI | 1 | 181,248 bytes | |
WAVE | 2 | 22,222 bytes | |
RT_ICON | 3 | 90,092 bytes | |
RT_GROUP_ICON | 1 | 48 bytes | |
RT_VERSION | 1 | 1,076 bytes | |
RT_MANIFEST | 1 | 653 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win64.GenericMC.cc without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system