File Name | Valorant External.exe |
File Type |
PE32+ executable (console) x86-64, for MS Windows
|
Scanner Version | 1.0.169.174 |
Database Version | 2024-03-18 04:00:25 UTC |
Malware family: Keylogger
Hash Type | Value | Action |
---|---|---|
MD5 |
bf75fb01abcfb3627b77eaed2001bca5
|
|
SHA1 |
68af361f898df5dd43addae52347c141e332faf1
|
|
SHA256 |
f38fd9a79081a6b2da14111d76956003e7655572dd9fefc1d1d724b7c233fe87
|
|
SHA512 |
fe8e3c91bb63c7e556987ca6bd1c95ace1b97fe5f957658c2a0b17047716231cf41c16045869416abe0a29bb95aaac0fb40f8d1465fff550ea329a9847175b90
|
|
ImpHash |
23c04e41a0d8837cee214d199f10f363
|
Image Base | 0x140000000 |
Entry Point | 0x14009fe3c |
Compilation Time | 2023-11-25 16:36:46 |
Checksum | 0x00000000 (Actual: 0x000befc9) |
OS Version | 6.0 |
PEiD Signatures |
PE32+ executable (console) x86-64, for MS Windows
|
PDB Path | C:\Users\roni\Desktop\UC FREE\VAL CHAIR\x64\Release\loader.pdb |
Digital Signature | The PE file does not contain a certificate table. |
Imports | 20 libraries |
Exports | 0 functions |
Resources | 1 Resources |
Sections | 6 Sections |
Name | Virtual Address | Virtual Size | Raw Size | Entropy | Characteristics | MD5 |
---|---|---|---|---|---|---|
.text |
0x00001000 |
658,304 bytes | 658,432 bytes | 5.97 (Normal) |
IMAGE_SCN_CNT_CODE|IMAGE_SCN_MEM_EXECUTE|IMAGE_SCN_MEM_READ
|
8ED59520ECA9AFF45E177122B576633A |
.rdata |
0x000a2000 |
104,208 bytes | 104,448 bytes | 6.34 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
750D2C6CFCE28D62BF2439E892AEB7DF |
.data |
0x000bc000 |
9,568 bytes | 2,560 bytes | 2.47 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ|IMAGE_SCN_MEM_WRITE
|
50055C5DDFD71E0ED3E269F03A12A756 |
.pdata |
0x000bf000 |
13,608 bytes | 13,824 bytes | 5.85 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
FCB0BABFEA06DCF631A5CD04E98BAFF9 |
.rsrc |
0x000c3000 |
488 bytes | 512 bytes | 4.77 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_READ
|
4DDCBAB8AAAE10A6872E1399BDCD4E5F |
.reloc |
0x000c4000 |
924 bytes | 1,024 bytes | 5.01 (Normal) |
IMAGE_SCN_CNT_INITIALIZED_DATA|IMAGE_SCN_MEM_DISCARDABLE|IMAGE_SCN_MEM_READ
|
8C6780BB4DF2C784C0662A54B88D8B46 |
Resource Type | Count | Total Size | Percentage |
---|---|---|---|
RT_MANIFEST | 1 | 392 bytes |
This file is not digitally signed.
⚠ This file either lacks a digital signature or the certificate chain could not be verified
Exercise caution when executing unsigned files from unknown sources
The PE file does not contain a certificate table.
Recommendation: Verify the file source and ensure it comes from a trusted publisher.
Gridinsoft has the capability to identify and eliminate Spy.Win64.Keylogger.sa without requiring further user intervention.
Download Anti-MalwareFollow these steps to completely remove the threat from your system