File Name | AVG AntiVirus 2024 + Crack.exe |
File Type |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Scanner Version | 1.0.172.174 |
Database Version | 2024-04-24 22:00:48 UTC |
Malware family: ZgRAT
Hash Type | Value | Action |
---|---|---|
MD5 |
15717c3cae5e0fab953c47d78272b64f
|
|
SHA1 |
358aed328e480468da2e69a31c7c986262f8d794
|
|
SHA256 |
8ead469ebb7a3d34b586eefd2c8489f83fb1e94ddd4eaf9540afe89d6e533c84
|
|
SHA512 |
fe216bf3f76facc3dea7afabcf31dc022315edb10a446f926b5bdc5f7329a0df9b64e41712509f94c487ecec4b8e9d512cb1c07caa6bff17239c0332f2414ccb
|
|
ImpHash |
90a754824211c648b161e0e146d30cbf
|
Image Base | 0x00400000 |
Entry Point | 0x00fc43f9 |
Compilation Time | 2024-04-06 08:30:20 |
Checksum | 0x00000000 (Actual: 0x00c45cb5) |
OS Version | 6.0 |
PEiD Signatures |
PE32 executable (GUI) Intel 80386, for MS Windows
|
Digital Signature | The PE file does not contain a certificate table. |
Imports |
2 libraries
ole32, KERNEL32 |
Exports | 0 functions |
Resources | 0 Resources |
Sections | 8 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
164,724 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D41D8CD98F00B204E9800998ECF8427E |
.rdata |
0x0002a000 |
61,116 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
D41D8CD98F00B204E9800998ECF8427E |
.data |
0x00039000 |
12,436 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.cSs |
0x0003d000 |
2,110,552 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
D41D8CD98F00B204E9800998ECF8427E |
.7dp |
0x00241000 |
5,765,433 bytes | 0 bytes | 0.00 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
D41D8CD98F00B204E9800998ECF8427E |
.{w0 |
0x007c1000 |
1,252 bytes | 1,536 bytes | 0.22 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
7A133B315CD66EEFB4186013723070B7 |
.TGu |
0x007c2000 |
12,842,816 bytes | 12,843,008 bytes | 7.96 (Packed/Encrypted) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
162D87D33860B8C7F7A4ECBB3E6911C5 |
.reloc |
0x01402000 |
1,984 bytes | 2,048 bytes | 4.43 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
2919D6378A734985320B9F6152486346 |
1 section(s) with high entropy (≥7.5) detected - possible packing/encryption
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Malware.Win32.ZgRAT.tr without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system