Categories: Malware

Babar.38298 malicious file

The Babar.38298 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.38298 virus can do?

Sample contains Overlay data
Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Babar.38298?


File Info:
name: 624129C9CF4B12EBE598.mlwpath: /opt/CAPEv2/storage/binaries/31cc4547a3b310f178d80c13c3c1b515e88a924e486dac15d273405e69aa1d6fcrc32: 585FAA61md5: 624129c9cf4b12ebe59865ddd7e44756sha1: ad769ba2574bbd7ade5f80a71be4058dce6f7d61sha256: 31cc4547a3b310f178d80c13c3c1b515e88a924e486dac15d273405e69aa1d6fsha512: 2cccb4908006b526b5008e0c2b0674224f6606b72711ae7e7df10b315a20d580ecae01fc019c4453eeadffe8de9c531f63c22f8bc88ab78870261b66a2edf106ssdeep: 768:sUqYVDkoq12h3QXKScS1PdlmTA5xB8gsbn8xhsu350Zi9zuJN:srYVDkoq12h3QXD11esj8x8xhsuxzubtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T106F26C83E7E4C472F5B2DEB89D74C11A6D3F3EA22D35805E9194E98D1C727D0A92831Bsha3_384: 43aa028f1d5a35076e153fca6541fcddf346ed3b7b62b572f076628e26a2da85e30b71b48a12398bb4afa6c50971528dep_bytes: 558bec83c4e8535633c08945ec8945e8timestamp: 1992-06-19 22:22:17
Version Info:
Comments: CompanyName: 360.cnFileDescription: 360杀毒 主程序FileVersion: 2, 0, 0, 1330InternalName: 360sd.exeLegalCopyright: (C)360.cn Inc.All Rights Reserved.LegalTrademarks: OriginalFilename: 360sd.exePrivateBuild: ProductName: 360杀毒ProductVersion: 2, 0, 0, 1330SpecialBuild: Translation: 0x0804 0x04b0

Babar.38298 also known as:

Cynet	Malicious (score: 99)
FireEye	Generic.mg.624129c9cf4b12eb
VIPRE	Gen:Variant.Babar.38298
K7AntiVirus	Virus ( 7000000f1 )
BitDefender	Gen:Variant.Babar.38298
K7GW	Virus ( 7000000f1 )
Cybereason	malicious.9cf4b1
Cyren	W32/Hupigon.XNJH-2137
Elastic	malicious (moderate confidence)
ESET-NOD32	a variant of Win32/Raxtip.D
APEX	Malicious
NANO-Antivirus	Trojan.Win32.Delf.fiijiu
MicroWorld-eScan	Gen:Variant.Babar.38298
Avast	Win32:Delf-SFH [Trj]
Ad-Aware	Gen:Variant.Babar.38298
Emsisoft	Gen:Variant.Babar.38298 (B)
DrWeb	Trojan.Siggen11.64588
TrendMicro	BKDR_HUPIGON.GEN
Trapmine	malicious.high.ml.score
Avira	TR/Delf.Agent.iirjp
MAX	malware (ai score=82)
Antiy-AVL	Trojan/Generic.ASMalwS.81D8
Microsoft	Trojan:Win32/Wacatac.B!ml
Arcabit	Trojan.Babar.D959A
GData	Gen:Variant.Babar.38298
Google	Detected
AhnLab-V3	Malware/Win32.Generic.C2555944
BitDefenderTheta	Gen:NN.ZelphiF.34646.cG2@aO!llyfb
ALYac	Gen:Variant.Babar.38298
VBA32	suspected of Trojan.Downloader.gen
Cylance	Unsafe
TrendMicro-HouseCall	BKDR_HUPIGON.GEN
Yandex	TrojanSpy.Agent!d/veGs/pY08
Ikarus	Trojan.Win32.Genome
AVG	Win32:Delf-SFH [Trj]
Panda	Trj/GdSda.A