Gridinsoft Logo

Nixware.dll Trojan Gen Analysis

Updated 26 days ago
Checked by Malaware Check
nixware.dll

Technical Analysis

File Name nixware.dll
File Type
PE32+ executable (DLL) (GUI) x86-64, for MS Windows
Scanner Version 1.0.216.174
Database Version 2025-05-10 13:00:20 UTC
⚠

Trojan.Win64.Gen.cl

Malware family: Gen

This is a generic detection identifier for files exhibiting Trojan horse characteristics. It indicates malware that disguises itself as legitimate software while containing malicious code designed to compromise system security or steal information.
N/A
Detection Rate
2,224,128
File Size (bytes)
2025-05-10
Analysis Date

Scan Another File

File Identification

Hash Type Value Action
MD5
2b8aefbb7a0aa80e2f664b8a4899278f
SHA1
6f56ec8e0ff6fe0e2fe0780762c3e594c44346c5
SHA256
f2c18ba4eaa42ec62970819e6a4145ed5b9cb59ac671de91d357c14bdd6a4830
SHA512
901e43f50d522dd9713c0b9c0c66f7a4fb9377c9f04364c16b6da1b5f3ca8fb86ef99fe73050d778fb40d7462ffb5dc22305db6757fd3ff7adedf5fb072813a3
ImpHash
2f9b99aa2758ed02ad0d48b220ee310f

PE Analysis

Basic Information

▼
Image Base 0x180000000
Entry Point 0x18019e970
Compilation Time 2024-06-26 16:14:33
Checksum 0x00000000 (Actual: 0x0022d467)
OS Version 6.0
PEiD Signatures PE32+ executable (DLL) (GUI) x86-64, for MS Windows
PDB Path D:\Source\nixware_x64\build\release\nixware.pdb
Digital Signature No valid SignedData structure was found.
Imports 17 libraries
Exports 0 functions
Resources 1 Resources
Sections 6 Sections

PE Sections

▼
Name Virtual Address Virtual Size Raw Size Entropy Characteristics MD5
.text 0x00001000 1,721,763 bytes 1,721,856 bytes 6.02 (Normal) IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ F60F247382CCE07DE602BE7FB87B41A0
.rdata 0x001a6000 410,912 bytes 411,136 bytes 6.49 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 04C9E4C8CC1DB7F344C6FDA6E0E103AE
.data 0x0020b000 38,880 bytes 6,144 bytes 4.63 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE B6C8E02B19AC82D95CCAAEBFF35EC0F0
.pdata 0x00215000 78,732 bytes 78,848 bytes 6.04 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ BE705ECF0CDE53ABC38B558E3690D5CC
.rsrc 0x00229000 248 bytes 512 bytes 2.53 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ 752BC6D906446AD7277D81C64C8FCD14
.reloc 0x0022a000 4,288 bytes 4,608 bytes 5.28 (Normal) IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ 02AEC87CC012233FFAE61DEE28C9C016

Resource Analysis

▼
Total Resources: 1 (145 bytes)
Resource Type Count Total Size Percentage
RT_MANIFEST 1 145 bytes
100%

Certificate Chain Analysis

▼
No Digital Signatures

This file is not digitally signed.

Security Implications:
  • Cannot verify the publisher's identity
  • Increased security risk when running this file
  • May trigger security warnings on some systems

⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources

Certificate Verification Status

No valid SignedData structure was found.

Recommendation: Verify the file source and ensure it comes from a trusted publisher.

Trojan.Win64.Gen.cl Removal

Gridinsoft has the capability to identify and eliminate Trojan.Win64.Gen.cl without requiring further user intervention.

Download Anti-Malware

Removal Instructions

Follow these steps to completely remove the threat from your system

  1. Start by downloading Gridinsoft Anti-Malware to your computer.
  2. Double-click on the gsam-en-install.exe file and follow the on-screen instructions to install the program.
  3. Once the installation of Gridinsoft Anti-Malware is complete, the program will open on the Scan screen.
  4. Click on the "Standard Scan" button to begin scanning your computer for threats.
  5. After the scanning process is finished, click on "Clean Now" to remove any detected threats.
  6. If prompted, restart your system to complete the removal process and ensure all threats are eliminated.
Important: Before You Start
Disconnect from the internet to prevent the malware from spreading or downloading additional threats. Run the scan in Safe Mode for better detection and removal of persistent threats.

Leave a Comment

Share your thoughts or insights about this file. Do you align with our conclusion?

* Your feedback could influence our rating, and rest assured, your email will remain confidential and will only be used to communicate with you if necessary.
Your Score for

Gridinsoft Anti-Malware

Cure your PC from any kind of malware

GridinSoft Anti-Malware will help you to protect your computer from spyware, trojans, backdoors, rootkits. It cleans your system from annoying advertisement modules and other malicious stuff developed by hackers.

Anti-Malware Download Now
Gridinsoft Anti-Malware