Gridinsoft Logo

Images.scr Trojan CoinMiner Analysis

Trojan CoinMiner
Updated on 2024-04-24 (9 months ago)
Checked by Online Virus Scanner
Online Virus Checker v.1.0.172.174
DB Version: 2024-04-24 05:00:35

Trojan.Win32.CoinMiner.vb

CoinMiner is a type of malware that harnesses the victim's computer resources, primarily CPU and RAM, to engage in cryptocurrency mining, such as for Monero or Zcash. This malware establishes persistence by integrating an open-source mining tool into the system's startup routine without the user's consent. Advanced coin miners often employ techniques like timer configurations or CPU usage limits to operate discreetly and avoid detection.

File images.scr
Checked 2024-04-24 03:02:57
MD5 3b367c3aa2426235679cd485dcfd6ae8
SHA1 514d0c633d50157e74e976df0c1b5dcf9f51ed24
SHA256 8bee95131ae47d9a5e3c8cccceaaad7e5567eac66ae7c0d875c9a57d3fc7acef
SHA512 23f83591b1d32aeaa5803fd5404bda077c290adf853723cce8169f60326e8bd6f32a55e6ad2dd5fc3e5139ad8a284d61537fe448a93cb2a237b1e103e9467885
Imphash 7fa974366048f9c551ef45714595665e
File Size 4678908 bytes

Trojan.Win32.CoinMiner.vb Removal

Trojan.Win32.CoinMiner.vb Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.CoinMiner.vb without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

File Version Information

Comments FOLDER
CompanyName
FileDescription Folder
FileVersion 0.4
LegalCopyright Copyright © 2014
LegalTrademarks
ProductName Images folder (x86-x64)
ProductVersion 0.2
Translation 0x0000 0x04e4

Portable Executable Info

2da2edd4775d7fa6fda4cfbf4ac24b43
d8e1359d6cc5fff553bd16a08c6ea386
beb2b6b6766276b4
Image Base: 0x00400000
Entry Point: 0x004030fa
Compilation: 2009-12-05 22:50:52
Checksum: 0x00000000 (Actual: 0x004818c0)
OS Version: 4.0
PEiD: PE32 executable (GUI) Intel 80386, for MS Windows, Nullsoft Installer self-extracting archive
Sign: The PE file does not contain a certificate table.
Sections: 5
Imports: KERNEL32, USER32, GDI32, SHELL32, ADVAPI32, COMCTL32, ole32, VERSION,
Exports: 0
Resources: 16

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x00005c4c 0x00005e00 856b32eb77dfd6fb67f21d6543272da5 6.44
.rdata 0x00007000 0x0000129c 0x00001400 dc77f8a1e6985a4361c55642680ddb4f 5.05
.data 0x00009000 0x00025c58 0x00000400 7922d4ce117d7d5b3ac2cffe4b0b5e4f 4.80
.ndata 0x0002f000 0x0000b000 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.rsrc 0x0003a000 0x0000dbe8 0x0000dc00 e11f7d72f9917a6708750856899916bf 6.73

Leave a comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware