Gridinsoft Logo
File Icon

Beae44fc3639ef49dc5025bc19e78433e9e0522e5a1dfd88b7a957a38098c5a4.exe Malware Gen Analysis

Updated 2 months ago
Checked by Malaware Check
beae44fc3639ef49dc5025bc19e78433e9e0522e5a1dfd88b7a957a38098c5a4.exe

Technical Analysis

File Name beae44fc3639ef49dc5025bc19e78433e9e0522e5a1dfd88b7a957a38098c5a4.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.211.174
Database Version 2025-03-21 23:00:44 UTC
⚠

Malware.Win32.Gen.tr

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
37,236,224
File Size (bytes)
2025-03-22
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
fe2cbcaa47f8bb6b40f4629a3544e399
SHA1
43925b71edba4a96fbee7a2127306cbc1a95ec0c
SHA256
beae44fc3639ef49dc5025bc19e78433e9e0522e5a1dfd88b7a957a38098c5a4
SHA512
2a6d2115c23c28ac7a6b1fac4db6742443ba9258cc121c6bb8f726849190465c84782dc69feea291a28c0c772a3c7fc00b213566bacd23184788b4edeea24b15
ImpHash
e59d00b0d90522ee1a983f13d4ff7e50

PE Analysis

Basic Information

▼
Icon
Hash: b8de8cd70d2ca3c190635b2500928066
Fuzzy: f158cdf0d25321fbd7b11997257f3414
dHash: fcccc6a28282aad0
Image Base 0x00400000
Entry Point 0x004213c0
Compilation Time 2024-06-12 14:58:14
Checksum 0x00235c29 (Actual: 0x023867c7)
OS Version 6.0
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 4 libraries
KERNEL32, USER32, SHELL32, OLEAUT32
Exports 0 functions
Resources 20 Resources
Sections 5 Sections

Version Information

▼
FileVersion 117.0.5408.39
ProductVersion 117.0.5408.39
FileDescription Opera installer SFX
CompanyName
LegalCopyright Opera Software 2025
productname Opera installer
stream Stable
Translation 0x0000 0x04b0
CompanyName Igor Pavlov
FileDescription 7z Setup SFX
FileVersion 23.01
InternalName 7zS.sfx
LegalCopyright Copyright (c) 1999-2023 Igor Pavlov
OriginalFilename 7zS.sfx.exe
ProductName 7-Zip
ProductVersion 23.01
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 238,009 bytes 238,080 bytes 6.63 (Compressed) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ 0572561436FA265B9CA1E591563400A8
.rdata 0x0003c000 59,514 bytes 59,904 bytes 4.61 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 920FB4C20F4C23177C53DDE0A09C9042
.data 0x0004b000 19,424 bytes 7,168 bytes 4.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE E00A51642EA77DDEA3AF17CFD1E49F31
.rsrc 0x00050000 33,136 bytes 33,280 bytes 5.78 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 3C39C47D7B1A7C6C8450826346B477EE
.reloc 0x00059000 463,872 bytes 463,872 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ C25E2867E1C98C111EAF76D1619E29D9
Entropy Analysis Alert

1 section(s) with high entropy (≥7.5) detected - possible packing/encryption

1 section(s) with elevated entropy (≥6.5) - possible compression

Resource Analysis

▼
Total Resources: 20 (32,035 bytes)
Resource Type Count Total Size Percentage
RT_ICON 12 29,728 bytes
92.8%
RT_DIALOG 1 184 bytes
0.6%
RT_STRING 3 232 bytes
0.7%
RT_GROUP_ICON 1 174 bytes
0.5%
RT_VERSION 2 1,336 bytes
4.2%
RT_MANIFEST 1 381 bytes
1.2%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win32.Gen.tr Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.Gen.tr without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware