Categories: Malware

Babar.40934 information

The Babar.40934 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Babar.40934 virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
A process attempted to delay the analysis task.
Dynamic (imported) function loading detected
The binary contains an unknown PE section name indicative of packing
The executable is compressed using UPX
Authenticode signature is invalid
CAPE detected the Vidar malware family
Attempts to modify proxy settings
Harvests cookies for information gathering
Collects information to fingerprint the system

How to determine Babar.40934?


File Info:
name: 2F90117AF44DCE4484C3.mlwpath: /opt/CAPEv2/storage/binaries/3fcf4e86303d63b9aab3206025952edfe7fa84c89a7d9fc759d8e5633e1d1d08crc32: F8FE81FEmd5: 2f90117af44dce4484c36c3806f7cc9dsha1: 2616b94b72e4e9aa3e3b4df82eee293d5707c3f1sha256: 3fcf4e86303d63b9aab3206025952edfe7fa84c89a7d9fc759d8e5633e1d1d08sha512: ac262ba35ee0c57abcfe93c0ee233a64be53ea57ece6b8edf3e0dc5a6f4199b121d36e7029b8358264ed78d3c3e89601f04983d74e8abef49f6ca8609b9c97cassdeep: 196608:NLxMFlEcRYxMFlEcRqzq/7DuuSFBauWtKh+:HMFNRgMFNROZWtK+type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T17C666A50BABEC6F0C0163C35700D712FA97979164B1D49E3E7F02658EEB4AE24AF61D2sha3_384: a7e6e98d1b29b5dd9e3d6ed4f68b8a144b739a210afffaeb176cc249c82361ce5825d75939e6057ff67d15b9e221db22ep_bytes: 60be003043008dbe00e0fcff5783cdfftimestamp: 2022-04-24 08:16:41
Version Info:
CompanyName: Irrational GamesFileDescription: BioShock InfiniteFileVersion: 1,1,25,5165InternalName: XGame.exeLegalCopyright: Copyright 2002-2013 Irrational Games and Take-Two Interactive Software, Inc.OriginalFilename: BioShockInfinite.exeProductName: BioShock InfiniteProductVersion: 1.0.1643565Translation: 0x0409 0x04b0

Babar.40934 also known as:

MicroWorld-eScan	Gen:Variant.Babar.40934
BitDefender	Gen:Variant.Babar.40934
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/PSW.Agent.OGR
APEX	Malicious
Avast	FileRepMalware [Misc]
Rising	Stealer.Agent!8.C2 (TFE:dGZlOgULf+IlIEWvDA)
Ad-Aware	Gen:Variant.Babar.40934
Emsisoft	Gen:Variant.Babar.40934 (B)
McAfee-GW-Edition	BehavesLike.Win32.Shohdi.vh
FireEye	Generic.mg.2f90117af44dce44
Sophos	Generic ML PUA (PUA)
SentinelOne	Static AI – Malicious PE
GData	Gen:Variant.Babar.40934
MAX	malware (ai score=80)
Antiy-AVL	Trojan/Generic.ASMalwS.226649A
Arcabit	Trojan.Babar.D9FE6
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
ALYac	Gen:Variant.Babar.40934
BitDefenderTheta	Gen:NN.ZexaF.34606.@tKfaqVIH1ji
AVG	FileRepMalware [Misc]
Cybereason	malicious.b72e4e