Categories: Malware

What is “Doina.27057”?

The Doina.27057 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Doina.27057 virus can do?

Presents an Authenticode digital signature
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine Doina.27057?


File Info:
name: DFBF20BF5B59527CECB0.mlwpath: /opt/CAPEv2/storage/binaries/0891117dc130a5c9c1a94524e0728e3b8202fa905480586a7461ef0f5e5610a2crc32: 760D811Emd5: dfbf20bf5b59527cecb0cda6b3c211f0sha1: d3b2fb5e5c9979bb0f034b4624c55a7d2020f6fcsha256: 0891117dc130a5c9c1a94524e0728e3b8202fa905480586a7461ef0f5e5610a2sha512: f15f99710b9dc137faa0e2ec91b43500aa347a00c35e4acdc17dfaaf37dc4fbfbca77a439107055b6fda67c33c97eb42dbca8236714d615b13d20e180e7b5663ssdeep: 3072:0lOtuGx2iB/qxmY33JjXjMQpsQOSiLEO53KH5JLy:z2m/qxJnJjgMt2LEO5Yytype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1C304F81DE6E2D176C827083204CBD1BE5934BA7063598CDBF2C00E9A9976EF1637539Bsha3_384: 4c33e084327ed6000208958e123b758a0af1e4c7fb3f9ea7f2900d85ab0743b2ffd2ff83226cdcc506720d2d73ad87a6ep_bytes: e88d050000e91cfdffffff2550964200timestamp: 2021-03-20 16:07:46
Version Info:
CompanyName: Microsoft CorporationFileDescription: Consent UI for administrative applicationsFileVersion: 6.1.7601.18896InternalName: consentLegalCopyright: ? Microsoft Corporation. All rights reserved.OriginalFilename: consent.exeProductName: consentProductVersion: 6.1.7601.18896Translation: 0x0804 0x04b0

Doina.27057 also known as:

MicroWorld-eScan	Gen:Variant.Doina.27057
FireEye	Generic.mg.dfbf20bf5b59527c
McAfee	Artemis!DFBF20BF5B59
Cylance	Unsafe
Zillya	Trojan.Farfli.Win32.40245
CrowdStrike	win/malicious_confidence_90% (W)
BitDefenderTheta	Gen:NN.ZexaF.34062.kC1@a8xDpPoj
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	Win32/Farfli.CZM
TrendMicro-HouseCall	TROJ_GEN.R035C0WL521
Kaspersky	HEUR:Trojan.Win32.Agentb.gen
BitDefender	Gen:Variant.Doina.27057
Avast	Win32:Trojan-gen
Tencent	Win32.Trojan.Falsesign.Wwep
Ad-Aware	Gen:Variant.Doina.27057
Emsisoft	Gen:Variant.Doina.27057 (B)
TrendMicro	TROJ_GEN.R035C0WL521
McAfee-GW-Edition	Artemis
Sophos	Mal/Generic-S
Ikarus	Trojan.Win32.Farfli
GData	Gen:Variant.Doina.27057
eGambit	PE.Heur.InvalidSig
Avira	TR/Farfli.jwpsh
Antiy-AVL	Trojan/Generic.ASMalwS.34E5ABC
Microsoft	Trojan:Win32/Sabsik.FL.B!ml
Cynet	Malicious (score: 100)
VBA32	BScope.Trojan.Agent
ALYac	Gen:Variant.Doina.27057
MAX	malware (ai score=86)
Fortinet	W32/Farfli.CZM!tr
AVG	Win32:Trojan-gen
Panda	Trj/GdSda.A