| 在线病毒检测器 | v.1.0.205.174 |
| 数据库版本: | 2025-01-21 22:00:29 |
Wacatac是一种属于计算机病毒广泛类别的恶意软件。它以其恶意功能而闻名，包括数据窃取、系统妥协和在受感染系统上执行勒索软件等附加恶意负载。
| File | generic.keygen.exe |
| 已检查 | 2025-01-21 20:54:45 |
| MD5 | ce7aff41b893a07cb610151d4f732002 |
| SHA1 | d5655dcc3b292b12980fabe71bf9653b68ce17c4 |
| SHA256 | 0b182848cc93a7b90e26a0d1846a1d4639f0116ea13bbe90c5c7b239895fb18f |
| SHA512 | c07009e1f9bae9cbc8a4309ca49eb171b0f2633459c1eb59734927cbeadd4af49fae639051cdf5f55c9813bd12c139c55a2c6e890f2b1fd97173914d3b320943 |
| Imphash | e680c7459f67d36a92d8269037dea135 |
| File Size | 5120 bytes |
Gridinsoft能够识别并消除Ransom.Win32.Wacatac.sa，无需进一步的用户干预。
| Image Base: | 0x00400000 |
| Entry Point: | 0x004010bb |
| Compilation: | 2013-10-02 18:17:18 |
| Checksum: | 0x00007d8f (Actual: 0x00007d8f) |
| OS Version: | 4.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 4 |
| Imports: | user32, kernel32, advapi32, msvcrt, |
| Exports: | 0 |
| Resources: | 1 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x00000468 | 0x00000600 | cac87ba9d937adf880f0947b5bd0b8f6 | 4.70 |
| .rdata | 0x00002000 | 0x000002d0 | 0x00000400 | 6c2bd01bc98bcf2b88d7eb2c1422fdc1 | 3.67 |
| .data | 0x00003000 | 0x00000496 | 0x00000400 | 4c25d037aec467ad64a3f9dd6ee3c6e9 | 0.71 |
| .rsrc | 0x00004000 | 0x000001d0 | 0x00000200 | 512248f851f9a04396f012aee912d8dc | 2.50 |
