| 在线病毒检测器 | v.1.0.195.174 |
| 数据库版本: | 2024-11-06 13:00:29 |
Wacatac是一种属于计算机病毒广泛类别的恶意软件。它以其恶意功能而闻名，包括数据窃取、系统妥协和在受感染系统上执行勒索软件等附加恶意负载。
| File | UNINSTALL.exe |
| 已检查 | 2024-11-06 11:36:34 |
| MD5 | f2480a4bacd1ba0cd624e156ddcb0b01 |
| SHA1 | f119d6f444fcce8b30ed0cf20bfde8bfb793f0c0 |
| SHA256 | de40f5c8765b5bbecc05577c967631d2ef7095a83ee418fe4532bc86830946ab |
| SHA512 | 9cb518dc64a957d197fb0f004088438f82eb3289227058cdaa75d0c652c988f0fd3612bed45ce9097259cff93511934828f093f434c685cb4c57e884db6b593e |
| Imphash | 3cbd26f7129b578c97ad3b7168086223 |
| File Size | 592902 bytes |
Gridinsoft能够识别并消除Ransom.Win32.Wacatac.oa!s1，无需进一步的用户干预。
 |
5a651237ee8581c93d8e0585f5eb98d9 abd592fe5b6f602d24a860ddcf397713 1379796d17170b33 |
| Image Base: | 0x00400000 |
| Entry Point: | 0x00406c1d |
| Compilation: | 2023-11-13 02:03:35 |
| Checksum: | 0x00000000 (Actual: 0x0009de60) |
| OS Version: | 6.0 |
| PEiD: | PE32 executable (GUI) Intel 80386, for MS Windows |
| Sign: | No valid SignedData structure was found. |
| Sections: | 5 |
| Imports: | KERNEL32, USER32, GDI32, ADVAPI32, SHELL32, |
| Exports: | 0 |
| Resources: | 30 |
| 名称 | 虚拟地址 | 虚拟大小 | 原始大小 | MD5 | 熵 |
|---|---|---|---|---|---|
| .text | 0x00001000 | 0x0001193a | 0x00011a00 | 286f0a5fc1aa92554c8d2694c461d6eb | 6.60 |
| .rdata | 0x00013000 | 0x00008a30 | 0x00008c00 | 3af84f8199ec9f62772d5bee32384b45 | 5.21 |
| .data | 0x0001c000 | 0x00048dc8 | 0x00008200 | 54ef18e44f16cf4d60c61eb19fa9801a | 4.29 |
| .rsrc | 0x00065000 | 0x00047888 | 0x00047a00 | ce00d92c66d1abbfe5a041fde6aa1c9d | 6.13 |
| .reloc | 0x000ad000 | 0x000027f4 | 0x00002800 | 3835ba6719a34ce9b058381e22b33585 | 6.43 |
