B3d07afbb2bf86e9c3834d6e10262e0d54652283a7ff967795bc04bd40027361.exe Trojan CoinMiner Analysis

Trojan CoinMiner
Updated on 2024-07-08 (13 days ago)
Checked by Online Virus Scanner
Online Virus Checkerv.1.0.181.174
DB Version:2024-07-08 13:00:26

Trojan.Win32.CoinMiner.oa!s1

CoinMiner is a type of malware that harnesses the victim's computer resources, primarily CPU and RAM, to engage in cryptocurrency mining, such as for Monero or Zcash. This malware establishes persistence by integrating an open-source mining tool into the system's startup routine without the user's consent. Advanced coin miners often employ techniques like timer configurations or CPU usage limits to operate discreetly and avoid detection.

Fileb3d07afbb2bf86e9c3834d6e10262e0d54652283a7ff967795bc04bd40027361.exe
Checked2024-07-08 10:29:15
MD56a0f4518e0114473107027a2b85a1f95
SHA1176e229a284265f04f1eb5078e31a760caec68ae
SHA256b3d07afbb2bf86e9c3834d6e10262e0d54652283a7ff967795bc04bd40027361
SHA51225efb2b8063310e45ba85adf7564ab1868b8078265329f0d86286fec0fc40a24353d5cb9129a224d6aff13e4078644a650c5fed82fd6344c0a128e8534fba113
Imphashed240876b9293af2891f19d47bc5c522
File Size50115 bytes

Trojan.Win32.CoinMiner.oa!s1 Removal

Trojan.Win32.CoinMiner.oa!s1 Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win32.CoinMiner.oa!s1 without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

Image Base:0x00400000
Entry Point:0x0040a630
Compilation:1992-06-19 22:22:17
Checksum:0x00000000 (Actual: 0x00013420)
OS Version:4.0
PEiD:PE32 executable (GUI) Intel 80386, for MS Windows
Sign:The PE file does not contain a certificate table.
Sections:8
Imports: KERNEL32, advapi32, oleaut32, user32,
Exports: 0
Resources:2

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
CODE 0x00001000 0x00009674 0x00009800 e2429793ee481de24a1ff78d091d410b 6.79
DATA 0x0000b000 0x00000158 0x00000200 f97cdc566056232b6158773ce9ed5292 2.86
BSS 0x0000c000 0x00005fbd 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.idata 0x00012000 0x0000070a 0x00000800 5c993177a2a972ccba18f23911937bdb 4.35
.tls 0x00013000 0x00000008 0x00000000 d41d8cd98f00b204e9800998ecf8427e 0.00
.rdata 0x00014000 0x00000018 0x00000200 f80cc3379c6c00970a98b7a56cf612cf 0.20
.reloc 0x00015000 0x000008d8 0x00000a00 a371492f16c0940507435909603efe88 0.00
.rsrc 0x00016000 0x00000200 0x00000200 f724afbd208d5bf000e4bcceda978f8a 3.24

Leave a comment*

Share your thoughts or insights about this file. Do you align with our conclusion?

*Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Please Wait...

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware