The cat.exe File Analysis

Updated 0 seconds ago

Checked by Malware Check

cat.exe

Technical Analysis

File Name	cat.exe
File Type	Win32 EXE
Magic Bytes	`PE32 executable (GUI) Intel 80386, for MS Windows`
SSDEEP Hash	24576:cqDEvCTbMWu7rQYlBQcBiT6rprG8aGlG6nc:cTvC/MTQYxsWR7aG0
Scanner Version	1.0.220.174
Database Version	2025-07-12 23:00:16 UTC

⚠

Suspicious File Detected

Detected by 12 security engines - requires caution

This file requires additional checking for potential threats. Based on suspicious indicators, we will soon add it to our virus database.

17%

Detection Rate

972,800

File Size (bytes)

12/72

Engines Detected

2025-07-12

Analysis Date

Scan Another File

File Identification

Hash Type	Value	Action
MD5	6bce5c79033ff6e811056175ca5ad227
SHA1	c2760e2e2e880c729f4456d0cb5f70151c83e39a
SHA256	922283a5359579d0e12da71967aba5ada47f818162894658dd3930c6f5fb8942
SHA512	c860ef28f0ad5719ba06a6cca827b726a8b20176df2a650a05a6cdc11628790cc5718f7adf4c47098288e67a9c3ca0a8dd954d546c1d859c97dc2d7a6fc3fb83
ImpHash	279daa640d9140f9842860a738abd363

Security Engines with Detections (12 of 72)

Elastic

malicious (high confidence) Malicious

Skyhigh

BehavesLike.Win32.Injector.dh Malicious

McAfee

Artemis!6BCE5C79033F Malicious

Cylance

Unsafe Malicious

APEX

Malicious Malicious

Paloalto

generic.ml Malicious

McAfeeD

Real Protect-LS!6BCE5C79033F Malicious

FireEye

Generic.mg.6bce5c79033ff6e8 Malicious

VBA32

Trojan-Downloader.Autoit.gen Malicious

TrendMicro-HouseCall

TROJ_GEN.R002H06IN24 Malicious

MaxSecure

Trojan.Malware.121218.susgen Malicious

Fortinet

W32/AutoIt.T!tr.dldr Malicious

60 engines reported no threats - Only engines with detections are shown above for clarity

PE Analysis

Basic Information

▼

Icon	Hash: 3d5dc4e5a911bee7292a914140092c8c Fuzzy: a788a1c8239f81d6e401dd187d68f45e dHash: b2b2e3e3e3a3a200
Image Base	`0x00400000`
Entry Point	`0x00420577`
Compilation Time	2024-09-10 21:30:49
Checksum	0x000f6f94 (Actual: 0x000f6f94)
OS Version	5.1
PEiD Signatures	`PE32 executable (GUI) Intel 80386, for MS Windows`
Digital Signature	No valid SignedData structure was found.
Imports	18 libraries
Exports	0 functions
Resources	26 Resources
Sections	5 Sections

Version Information

▼

Translation

0x0809 0x04b0

PE Sections

▼

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Characteristics	MD5
`.text`	`0x00001000`	633,629 bytes	633,856 bytes	6.67 (Compressed)	`IMAGE_SCN_CNT_CODE\|IMAGE_SCN_MEM_EXECUTE\|IMAGE_SCN_MEM_READ`	`0A1473F3064DCBC32EF93C5C8A90F3A6`
`.rdata`	`0x0009c000`	195,458 bytes	195,584 bytes	5.69 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`C9CF2468B60BF4F80F136ED54B3989FB`
`.data`	`0x000cc000`	28,780 bytes	18,432 bytes	0.58 (Normal)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ\|IMAGE_SCN_MEM_WRITE`	`53B9025D545D65E23295E30AFDBD16D9`
`.rsrc`	`0x000d4000`	93,304 bytes	93,696 bytes	7.22 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_READ`	`FA7956F27E5A082AA7C32CC55E916BBC`
`.reloc`	`0x000eb000`	30,100 bytes	30,208 bytes	6.80 (Compressed)	`IMAGE_SCN_CNT_INITIALIZED_DATA\|IMAGE_SCN_MEM_DISCARDABLE\|IMAGE_SCN_MEM_READ`	`C68EE8931A32D45EB82DC450EE40EFC3`

Entropy Analysis Alert

3 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼

Total Resources: 26 (91,847 bytes)

Resource Type	Count	Total Size	Percentage
RT_ICON	11	24,312 bytes	26.5%
RT_MENU	1	80 bytes	0.1%
RT_STRING	7	8,900 bytes	9.7%
RT_RCDATA	1	57,150 bytes	62.2%
RT_GROUP_ICON	4	178 bytes	0.2%
RT_VERSION	1	220 bytes	0.2%
RT_MANIFEST	1	1,007 bytes	1.1%

Certificate Chain Analysis

▼

No Digital Signatures

This file is not digitally signed.

Security Implications:

Cannot verify the publisher's identity
Increased security risk when running this file
May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
Email Security: Be cautious with email attachments and links, even from known contacts.

Proactive Protection

12 antivirus engines detected potential threats. This could be a false positive, especially for system tools or packed software. Verify the file source and check if it's digitally signed by a trusted publisher.

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Your Score for

5 4 3 2 1