Gridinsoft Logo

Quyengabon hack.exe Malware Generic Analysis

Updated 2 months ago
Checked by Malaware Check
quyengabon hack.exe

Technical Analysis

File Name quyengabon hack.exe
File Type
PE32+ executable (console) x86-64, for MS Windows
Scanner Version 1.0.212.174
Database Version 2025-04-06 02:00:48 UTC
⚠

Malware.Win64.Generic.cld

Malware family: Generic

This detection name identifies suspicious files displaying Trojan-like behavior patterns. It represents malware that masquerades as benign programs while executing unauthorized activities on the infected system.
N/A
Detection Rate
343,040
File Size (bytes)
2025-04-06
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4c86bd4a91f3c5bfecf5c11b68a3762b
SHA1
d7dd40b821ab47551b9fdec9235db165d954ed06
SHA256
b336095582c8e96df864275520955a21f5742d9bbd6934d299dd178130c06db6
SHA512
5a439d24bdc86db7124b0b35e26c0f9f33786181f821d5996872b9155de626f0577908b6b8063cec1fbbf5110e3e85eb23f3f92d96f453ead179a175320aab1a
ImpHash
4cfdf9f142d03ba26cd59b4cf4d5c250

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x140041b98
Compilation Time 2024-01-14 03:49:42
Checksum 0x00000000 (Actual: 0x00062851)
OS Version 6.0
PEiD Signatures PE32+ executable (console) x86-64, for MS Windows
PDB Path C:\Users\q\Downloads\Farlight-84-External-main bloodstrcik\Farlight-84-External-main\x64\Release\HackExternal.pdb
Digital Signature No valid SignedData structure was found.
Imports 19 libraries
Exports 0 functions
Resources 1 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 272,771 bytes 272,896 bytes 6.49 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ B5DA480C1FA96247D9DE35943197108A
.rdata 0x00044000 54,064 bytes 54,272 bytes 6.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1E8E79A8CD2ACD915E6AE130724F0D6A
.data 0x00052000 8,824 bytes 1,536 bytes 3.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E5D79FF6472608825C0D0DA0876BBE74
.pdata 0x00055000 11,904 bytes 12,288 bytes 5.56 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 40A977B94D367F0163660F257FA7DEFC
.rsrc 0x00058000 488 bytes 512 bytes 4.77 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 7C2BF6F6DEC9E1D4B954E0E7B2FDFC4D
.reloc 0x00059000 308 bytes 512 bytes 3.74 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C741AE333548F87EEADAE61F7C008026

Resource Analysis

▼
Total Resources: 1 (392 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 392 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win64.Generic.cld Removal

Gridinsoft has the capability to identify and eliminate Malware.Win64.Generic.cld without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware