LOADER.exe Trojan Kryptik Analysis
| Online Virus Checker | v.1.0.182.174 |
| DB Version: | 2024-07-15 22:00:23 |
Trojan.Win32.Kryptik.sa
Kryptik is classified as a Backdoor Trojan, which grants unauthorized access and control of a compromised computer to cybercriminals. This malicious software enables attackers to execute a range of harmful actions on the infiltrated system.
| File | LOADER.exe |
| Checked | 2024-07-15 19:11:11 |
| MD5 | 4b35f67016149aa5d49629f97565939d |
| SHA1 | 87e74a6c150874ded7c7194fe61f676b7ee64107 |
| SHA256 | 7e218ca0b5151f8e9d40a69842aaa8b71ac968399f1eba57570ed585df4301d9 |
| SHA512 | 363fe2aa1ffd11c655d5ea57b7fdb86b0a2a1a997a11cc48bf81876fc807d9b33315e70c8eb0eae0453f4141e832aeccd147729cb610c58005f96e389979849b |
| Imphash | 29096404eb65abacfe1d00a9631e29a4 |
| File Size | 709632 bytes |
Trojan.Win32.Kryptik.sa Removal
Gridinsoft has the capability to identify and eliminate Trojan.Win32.Kryptik.sa without requiring further user intervention.
- Start by downloading Gridinsoft Anti-Malware to your computer.
- Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
- Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
- Click on the "Standard Scan" button.
- After the scanning process is finished, click on "Clean Now" to remove any detected threats.
- If prompted, restart your system to complete the removal process.
Portable Executable Info
| Image Base: | 0x00400000 |
| Entry Point: | 0x0040978d |
| Compilation: | 2024-07-05 13:56:27 |
| Checksum: | 0x00000000 (Actual: 0x000b7875) |
| OS Version: | 6.0 |
| PEiD: | PE32 executable (console) Intel 80386, for MS Windows |
| Sign: | The PE file does not contain a certificate table. |
| Sections: | 6 |
| Imports: | USER32, KERNEL32, |
| Exports: | 1 |
| Resources: | 1 |
Sections
| Name | Virtual Address | Virtual Size | Raw Size | MD5 | Entropy |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x000265ee | 0x00026600 | a28ea553b2d678799b4f45acb1733989 | 6.66 |
| .bSS | 0x00028000 | 0x000007ad | 0x00000800 | 92361b93c5ba8f6c2311806aaf431e15 | 6.51 |
| .rdata | 0x00029000 | 0x0000b340 | 0x0000b400 | 34402e5200060bdd22e70660f0e3982e | 5.04 |
| .data | 0x00035000 | 0x00079b74 | 0x00078c00 | bab398d6ae30b4dc51978e4f1111ef40 | 8.00 |
| .rsrc | 0x000af000 | 0x000001e0 | 0x00000200 | c6b1451365683cb94736345806466f40 | 4.71 |
| .reloc | 0x000b0000 | 0x00001f1c | 0x00002000 | d191c015a6d181bc94c61936a982cf61 | 6.51 |
