Categories: Malware

Dropped:Generic.Dacic.C35DC41E.A.194F596B information

The Dropped:Generic.Dacic.C35DC41E.A.194F596B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropped:Generic.Dacic.C35DC41E.A.194F596B virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Authenticode signature is invalid
Binary compilation timestomping detected
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Dropped:Generic.Dacic.C35DC41E.A.194F596B?


File Info:
name: 16918ED84743EEBD3D9D.mlwpath: /opt/CAPEv2/storage/binaries/35031736331a5d54b94bc623be57ef352cb46f0990674fb34a453323f99a4c00crc32: 4A256460md5: 16918ed84743eebd3d9d406ead0a348csha1: ba7dd394fae7ed028a6c20ae7874c2cc912500a5sha256: 35031736331a5d54b94bc623be57ef352cb46f0990674fb34a453323f99a4c00sha512: ede1dd6233e3cf9580e7dad9aa2211d4d95a227af844b4b17c8bc448d0d4948b6e5945a15dfce3254acaead99b50e915e1d48562659150c9976b9974cb274760ssdeep: 768:KcezIbwMnU4JmmJ9R9iWYXasjZXA/MCrcioVLGq6jK:K7iwMUdKZiesj9n9iMLGq6jKtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1CA03F19E675508D2F0B8CFBE8F2C9503E837775C61A5EB4A2423F60F4C623A9A444791sha3_384: a1e22d854e9e9abacad62fa3969aa33ef9a5f8a38ad7120ce15238efe47b62ee2810542446bdbf49f48af169685c5a18ep_bytes: 60be00d040008dbe0040ffff5783cdfftimestamp: 2033-06-15 13:22:36
Version Info:
CompanyName: FileDescription: DlgServer Microsoft 基础类应用程序FileVersion: 1, 0, 0, 1InternalName: DlgServerLegalCopyright: 版权所有 (C) 2011LegalTrademarks: OriginalFilename: DlgServer.EXEProductName: DlgServer 应用程序ProductVersion: 1, 0, 0, 1Translation: 0x0804 0x04b0

Dropped:Generic.Dacic.C35DC41E.A.194F596B also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (moderate confidence)
MicroWorld-eScan	Dropped:Generic.Dacic.C35DC41E.A.194F596B
FireEye	Generic.mg.16918ed84743eebd
Skyhigh	BehavesLike.Win32.CoinMiner.nc
McAfee	Generic PWS.vv
Malwarebytes	MachineLearning/Anomalous.100%
Zillya	Trojan.OnLineGames.Win32.105853
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Password-Stealer ( 000250261 )
BitDefender	Dropped:Generic.Dacic.C35DC41E.A.194F596B
K7GW	Password-Stealer ( 000250261 )
Cybereason	malicious.4fae7e
Baidu	Win32.Trojan-Dropper.Dycler.a
Symantec	Infostealer.Gampass
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/PSW.OnLineGames.PIR
APEX	Malicious
ClamAV	Win.Malware.Onlinegames-7647999-0
Kaspersky	Trojan-GameThief.Win32.OnLineGames.ajscz
NANO-Antivirus	Trojan.Win32.Gamania.evhvb
Rising	Stealer.OnlineGames!1.65EB (CLOUD)
Emsisoft	Dropped:Generic.Dacic.C35DC41E.A.194F596B (B)
F-Secure	Trojan.TR/PSW.Lolyda.BY
DrWeb	Trojan.PWS.Gamania.30164
VIPRE	Dropped:Generic.Dacic.C35DC41E.A.194F596B
TrendMicro	TROJ_RVERSE.SMI
Trapmine	malicious.moderate.ml.score
Sophos	Troj/Vakooja-Q
SentinelOne	Static AI – Suspicious PE
MAX	malware (ai score=89)
Jiangmin	Trojan/Generic.vksb
Google	Detected
Avira	TR/PSW.Lolyda.BY
Varist	W32/Agent.JT.gen!Eldorado
Antiy-AVL	Trojan[GameThief]/Win32.OnLineGames
Kingsoft	malware.kb.b.949
Microsoft	Trojan:Win32/Wacatac.B!ml
Xcitium	TrojWare.Win32.PSW.GamePass.AHD@4l3ra2
Arcabit	Generic.Dacic.C35DC41E.A.194F596B
ZoneAlarm	VHO:Trojan-GameThief.Win32.OnLineGames.gen
GData	Dropped:Generic.Dacic.C35DC41E.A.194F596B
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.OnlineGameHack.R3318
BitDefenderTheta	AI:Packer.B099BD541F
ALYac	Dropped:Generic.Dacic.C35DC41E.A.194F596B
DeepInstinct	MALICIOUS
VBA32	BScope.Trojan.Dynamer
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_RVERSE.SMI
Ikarus	Trojan-GameThief.Win32.OnLineGames
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/OnLineGames.PIR!tr.pws
AVG	Win32:Agent-AMTO [Spy]
Avast	Win32:Agent-AMTO [Spy]
CrowdStrike	win/malicious_confidence_100% (W)