The vendetta loader exe File Malware Analysis
Gridinsoft Logo

The vendetta_loader.exe File Analysis

Updated 7 months ago
Checked by Malware Check
vendetta_loader.exe

Technical Analysis

File Name vendetta_loader.exe
File Type
PE32+ executable (GUI) x86-64, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-04 21:00:15 UTC
✓

Clean File

No threats detected by our scanner

0%
Detection Rate
23,622,340
File Size (bytes)
2025-05-04
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
7c19acd1bc2a7c2fa533fc3e83b94401
SHA1
4255114fbe615598bfa371e124f737a641fa6c7e
SHA256
e9287812fc6e98899cebbd5b7e80891510a696cc04e58ef3e3e08351ea19ccc8
SHA512
1e874b900ccee0ecf32d7a5778f4277fc6da908c130ed0c9a2c695c80a00b912fb0ab72660ba25bc426ba639d0340db0c6ee46dc0549316a6e35e3c5dc29cf59
ImpHash
88f70fb82598484a7ce88eef6418418b

PE Analysis

Basic Information

▼
Image Base 0x140000000
Entry Point 0x1400010f6
Compilation Time 2025-05-04 15:33:27
Checksum 0x004b3914 (Actual: 0x0168a4b4)
OS Version 4.0
PEiD Signatures PE32+ executable (GUI) x86-64, for MS Windows
Digital Signature No valid SignedData structure was found.
Imports 7 libraries
kernel32, oleaut32, user32, advapi32, ole32, ntdll, shlwapi
Exports 0 functions
Resources 0 Resources
Sections 22 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 2,007,304 bytes 2,007,552 bytes 6.11 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ A49ABA9F47DC1A383F63666F46451070
.data 0x001ec000 18,736 bytes 18,944 bytes 1.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9C565A05657676F58340EE3FE04C92D5
.rdata 0x001f1000 305,200 bytes 305,664 bytes 5.82 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 1A471F4CEBF182A2AFDCEFD099E83D07
/4 0x0023c000 4 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.pdata 0x0023d000 94,296 bytes 94,720 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ E219B62ECB1A0420337D49F823983AD2
.xdata 0x00255000 118,460 bytes 118,784 bytes 4.71 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 2BE6AFB28CFA7190E6AA53721AF54710
.bss 0x00272000 42,576 bytes 0 bytes 0.00 (Normal) IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE D41D8CD98F00B204E9800998ECF8427E
.idata 0x0027d000 13,876 bytes 14,336 bytes 4.66 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 6A11708F04CB6A96FEA5D5F0DD9DBE05
.CRT 0x00281000 104 bytes 512 bytes 0.41 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F5F693576681134C92696942C0774DCC
.tls 0x00282000 16 bytes 512 bytes 0.00 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE BF619EAC0CDF3F68D496EA9344137E8B
.reloc 0x00283000 7,988 bytes 8,192 bytes 5.42 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 7C81347BCE2C7CED166E34E52EFC0525
/14 0x00285000 208 bytes 512 bytes 0.87 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ B722B2FD2E1EAAAE31BFEE2794B8BEE2
/29 0x00286000 18,536 bytes 18,944 bytes 5.83 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 39E8CDCAB08C7F37AC9019464386928C
/41 0x0028b000 2,313 bytes 2,560 bytes 4.65 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 5554909C58CA9A9EA6A5B19593B7E300
/55 0x0028c000 2,422 bytes 2,560 bytes 4.81 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 8F06A836E1AA20E3D8C750A52CCCCB55
/67 0x0028d000 1,168 bytes 1,536 bytes 3.16 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 95BA820019A2738B5DC131AF8BC9B286
/80 0x0028e000 209 bytes 512 bytes 2.90 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 44574CAA58589002596A11BF741F67C8
/91 0x0028f000 1,138 bytes 1,536 bytes 4.19 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 03DDD647864B417B64C7D4B6553E3D35
/107 0x00290000 2,216 bytes 2,560 bytes 4.20 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 3E03D66F652E17F7F5B521D3A0D9F31D
/123 0x00291000 246 bytes 512 bytes 2.35 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 16FD0BFD33F7CF809177204DF742BCC6
.enigma1 0x00292000 4,096 bytes 17,891,328 bytes 6.57 (Compressed) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE 9E46B5E37BC9B104995E0BB19FE023DC
.enigma2 0x00293000 835,584 bytes 835,584 bytes 5.67 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_CNT_UNINITIALIZED_DATA|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE F1DBD63BC236372EAF96DCA81A75DF22
Entropy Analysis Alert

1 section(s) with elevated entropy (≥6.5) - possible compression

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Remember: This is Result of Online Virus Scanner

Gridinsoft Anti-Malware has a much more powerful virus scanning engine. We recommend using it for a more precise diagnosis of infected systems. This brief guide will help you install our flagship product for more accurate diagnostics:

Download Anti-Malware

Keep Your System Protected

This file appears clean, but regular security maintenance is important

  1. Regular Scans: Run weekly system scans to detect new threats before they can cause damage.
  2. Keep Software Updated: Ensure your operating system and all applications have the latest security patches.
  3. Safe Browsing: Avoid suspicious websites and never download software from untrusted sources.
  4. Email Security: Be cautious with email attachments and links, even from known contacts.
Proactive Protection
This file passed all security checks, but stay vigilant. New malware variants appear daily that can evade detection. Always verify files come from official sources and check digital signatures when available.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Stay Malware-Free: Keep Your PC Protected with Gridinsoft Anti-Malware

Gridinsoft Anti-Malware offers just that—peace of mind with a robust, user-friendly solution that’s constantly updated to combat the latest threats. Designed by cybersecurity experts, it provides real-time protection and effortless malware removal. It’s not just about detecting threats; it's about enhancing your digital life with uninterrupted security. Give it a try and experience what it feels like to browse worry-free!

Gridinsoft Anti-Malware Download Now
Gridinsoft Anti-Malware