Gridinsoft Logo
File Icon

SuccubusAffection1.09E.exe Malware Gen Analysis

Updated 1 month ago
Checked by Malaware Check
SuccubusAffection1.09E.exe

Technical Analysis

File Name SuccubusAffection1.09E.exe
File Type
PE32 executable (GUI) Intel 80386, for MS Windows
Scanner Version 1.0.215.174
Database Version 2025-04-27 01:00:18 UTC
⚠

Malware.Win32.Gen.cl

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
3,125,784
File Size (bytes)
2025-04-27
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
4e168b9677f1c914fbfbafc2844ef67c
SHA1
942c1398f801e6bdcec164efa0870cacc6291785
SHA256
da027594789fdc531d8e7a0ea3f2e3ade9a62fddb78f6023442e88ab0ef75359
SHA512
7098a83c1b2b9695a260d4e99fa03623ed4c7372a09ae225402be0a5bf58959671f48ede343e22204d2bb956eac1368e900d7ace2d467ed871f1d473021b9c7b
ImpHash
4f865cdcb2961646c161d697f6321c57

PE Analysis

Basic Information

▼
Icon
Hash: 7f53f11b45e2116f115db6014a929864
Fuzzy: 4166ad9e9e877ef84767234fa52a4c83
dHash: 40b17979b1f2e8e8
Image Base 0x00400000
Entry Point 0x00e0cfd4
Compilation Time 2020-03-26 16:58:46
Checksum 0x002fbc59 (Actual: 0x00303cf3)
OS Version 5.1
PEiD Signatures PE32 executable (GUI) Intel 80386, for MS Windows
Digital Signature The expected hash does not match the digest in SpcInfo
Imports 8 libraries
kernel32, Mai@KF, advapi32, oleaut32, gdi32, shell32, version, UnityPlayer
Exports 2 functions
Resources 12 Resources
Sections 9 Sections

Version Information

▼
FileVersion 2017.4.39.9728305
ProductVersion 2017.4.39.9728305
Unity Version 2017.4.39f1_947131c5be7e
Translation 0x0409 0x04b0

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
0x00001000 45,056 bytes 24,064 bytes 7.99 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6B0F63011B821AF6D0852CE60E838003
0x0000c000 24,576 bytes 9,216 bytes 7.87 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 5878BC2D223AF11B4BC99AB3D417B6A6
0x00012000 8,192 bytes 512 bytes 6.01 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE CE079A3A0F91F8A712249CEE164B96E6
0x00014000 4,096 bytes 512 bytes 2.14 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 680CB6347D52A9D375392ECF5557ADBD
0x00015000 569,344 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
0x000a0000 4,096 bytes 3,584 bytes 7.72 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE C8997CA0E952BABF1B518EBB89AB9E18
.rsrc 0x000a1000 569,344 bytes 565,760 bytes 3.08 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 418B941F01C1A3C3DA4A05ED25D65B47
0x0012c000 7,278,592 bytes 459,776 bytes 7.75 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 92341C3CA708D5FEBC728B412E5AEF9C
.data 0x0081d000 2,056,192 bytes 2,054,144 bytes 7.98 (Packed/Encrypted) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 54CBC7CCC4944D007C3FE145FF82B898
Entropy Analysis Alert

5 section(s) with high entropy (≥7.5) detected - possible packing/encryption

Resource Analysis

▼
Total Resources: 12 (564,769 bytes)
Resource Type Count Total Size Percentage
RT_ICON 9 562,568 bytes
99.6%
RT_GROUP_ICON 1 132 bytes
0%
RT_VERSION 1 448 bytes
0.1%
RT_MANIFEST 1 1,621 bytes
0.3%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

The expected hash does not match the digest in SpcInfo

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Malware.Win32.Gen.cl Removal

Gridinsoft has the capability to identify and eliminate Malware.Win32.Gen.cl without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware