FUD (1).exe Trojan Downloader Analysis

Trojan Downloader

Updated on 2024-07-08 (3 months ago)

Online Virus Checker	v.1.0.181.174
DB Version:	2024-07-08 02:00:26

Trojan.Win32.Downloader.cld

Downloader designed to download and install additional malware onto an infected computer or device. Unlike standalone trojans, downloader trojans do not have a wide range of malicious functions themselves; instead, they serve as a means to deliver other malware onto a victim's system.

File	FUD (1).exe
Checked	2024-07-07 23:30:29
MD5	3804a1a238d4e06c6e39c5d7d1274ebb
SHA1	679fac4c2f4e649dffca6ea7ca1b580a51fec7d4
SHA256	9f63a7094b62caaaa1ecfb80994b9c9dfc5c21cc3f4cb02a86fcd0bdcaea7fe7
SHA512	7480a04bf04b5db41a9e364428c57fd2da26829abb7439305f521079d92c1428397c392772e4257e827cb48597ee588a33fa42b22d190446f616f1a0f81d0b9c
Imphash	f34d5f2d4577ed6d9ceec516c1f5a744
File Size	5120 bytes

Trojan.Win32.Downloader.cld Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.Downloader.cld without requiring further user intervention.

Start by downloading Gridinsoft Anti-Malware to your computer.
Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
Click on the "Standard Scan" button.
After the scanning process is finished, click on "Clean Now" to remove any detected threats.
If prompted, restart your system to complete the removal process.

File Version Information

Translation	0x0000 0x04b0
Comments
CompanyName
FileDescription	FUD
FileVersion	1.0.0.0
InternalName	FUD.exe
LegalCopyright	Copyright © 2021
LegalTrademarks
OriginalFilename	FUD.exe
ProductName	FUD
ProductVersion	1.0.0.0
Assembly Version	1.0.0.0

Portable Executable Info

Image Base:	0x00400000
Entry Point:	0x004029e2
Compilation:	2090-02-06 08:47:46
Checksum:	0x00000000 (Actual: 0x000061f6)
OS Version:	4.0
PDB Path:	C:\Users\Darwin\source\repos\FUD\FUD\obj\Debug\FUD.pdb
PEiD:	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows
Sign:	The PE file does not contain a certificate table.
Sections:	3
Imports:	mscoree,
Exports:	0
Resources:	2

Sections

Name	Virtual Address	Virtual Size	Raw Size	MD5	Entropy
.text	0x00002000	0x000009e8	0x00000a00	2e3f200b731206b69513fca608b26063	5.17
.rsrc	0x00004000	0x0000057c	0x00000600	dd12f6baa09fc2534791e2c863611a7b	4.00
.reloc	0x00006000	0x0000000c	0x00000200	ebe32a80a974e5fdcc7aba0153c5e1da	0.08