Gridinsoft Logo

UNINSTALL.exe Trojan Wacatac Analysis

Trojan Wacatac
Updated on 2024-11-06 (25 days ago)
Checked by Online Virus Scanner
Online Virus Checker v.1.0.195.174
DB Version: 2024-11-06 13:00:29

Ransom.Win32.Wacatac.oa!s1

Wacatac is a type of malware that falls under the wide category of computer viruses. It is known for its malicious capabilities, which include data theft, system compromise, and the execution of additional malicious payloads on the infected system like ransomware.

File UNINSTALL.exe
Checked 2024-11-06 11:36:34
MD5 f2480a4bacd1ba0cd624e156ddcb0b01
SHA1 f119d6f444fcce8b30ed0cf20bfde8bfb793f0c0
SHA256 de40f5c8765b5bbecc05577c967631d2ef7095a83ee418fe4532bc86830946ab
SHA512 9cb518dc64a957d197fb0f004088438f82eb3289227058cdaa75d0c652c988f0fd3612bed45ce9097259cff93511934828f093f434c685cb4c57e884db6b593e
Imphash 3cbd26f7129b578c97ad3b7168086223
File Size 592902 bytes

Ransom.Win32.Wacatac.oa!s1 Removal

Ransom.Win32.Wacatac.oa!s1 Removal

Gridinsoft has the capability to identify and eliminate Ransom.Win32.Wacatac.oa!s1 without requiring further user intervention.

  • Start by downloading Gridinsoft Anti-Malware to your computer.
  • Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  • Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  • Click on the "Standard Scan" button.
  • After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  • If prompted, restart your system to complete the removal process.

Portable Executable Info

5a651237ee8581c93d8e0585f5eb98d9
abd592fe5b6f602d24a860ddcf397713
1379796d17170b33
Image Base: 0x00400000
Entry Point: 0x00406c1d
Compilation: 2023-11-13 02:03:35
Checksum: 0x00000000 (Actual: 0x0009de60)
OS Version: 6.0
PEiD: PE32 executable (GUI) Intel 80386, for MS Windows
Sign: No valid SignedData structure was found.
Sections: 5
Imports: KERNEL32, USER32, GDI32, ADVAPI32, SHELL32,
Exports: 0
Resources: 30

Sections

Name Virtual Address Virtual Size Raw Size MD5 Entropy
.text 0x00001000 0x0001193a 0x00011a00 286f0a5fc1aa92554c8d2694c461d6eb 6.60
.rdata 0x00013000 0x00008a30 0x00008c00 3af84f8199ec9f62772d5bee32384b45 5.21
.data 0x0001c000 0x00048dc8 0x00008200 54ef18e44f16cf4d60c61eb19fa9801a 4.29
.rsrc 0x00065000 0x00047888 0x00047a00 ce00d92c66d1abbfe5a041fde6aa1c9d 6.13
.reloc 0x000ad000 0x000027f4 0x00002800 3835ba6719a34ce9b058381e22b33585 6.43

Leave a comment *

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Gridinsoft Anti-Malware