How to remove SafeSign_ICBC_Per.exe

SafeSign_ICBC_Per.exe

The module SafeSign_ICBC_Per.exe has been detected as Trojan.Wacatac

SafeSign_ICBC_Per.exe
Remove SafeSign_ICBC_Per.ex

File Details

Product Name:

setup Application
MD5: 0b61157b0bd34316620b51f27c6293bb
Size: 16 MB
First Published: 2025-04-21 23:00:49 (a month ago)
Latest Published: 2025-04-21 23:00:49 (a month ago)
Status: Trojan.Wacatac (on last analysis)
Analysis Date: 2025-04-21 23:00:49 (a month ago)

Overview

Signed By: Industrial and Commercial Bank of China Limited
Status: Valid

Common Places:

%sysdrive%\cable dep550

Geography:

100.0%

OS Version:

Windows 10 100.0%

Analysis

Subsystem: Windows GUI
PE Type: pe
OS Bitness: 32
Image Base: 0x00400000
Entry Address: 0x000014f1

PE Sections:

Name Size of data MD5
.text 26112 432b52a75d859c76024c00d96394a444
.rdata 9728 57d8dbd085a461ae821fc29832280e93
.data 3584 d75e6c1ebad6888857c7291d12a70673
.rsrc 16912896 6c6d0450e7269fe0e9306a48c1b8ba7a
.reloc 27136 bc781fbf4a411ab3e2556b5dc31593d2

More information:

Search on Virustotal
Download GridinSoft Anti-Malware - Removal tool for SafeSign_ICBC_Per.exe
copyright for information about SafeSign_ICBC_Per.exe