Categories: Malware

Dropper.38 (file analysis)

The Dropper.38 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Dropper.38 virus can do?

Sample contains Overlay data
CAPE extracted potentially suspicious content
Authenticode signature is invalid
Behavioural detection: Injection (Process Hollowing)
Behavioural detection: Injection (inter-process)

How to determine Dropper.38?


File Info:
name: 952183E638885CFB1AFD.mlwpath: /opt/CAPEv2/storage/binaries/9eb90132c2107d8ffafc8d4ffd27a90b54f33e76ba0b722cc56303c850eb1831crc32: 0E061C05md5: 952183e638885cfb1afd0ab84800191esha1: f1eedec4aa587e3add2eb5d6eece3309c2961442sha256: 9eb90132c2107d8ffafc8d4ffd27a90b54f33e76ba0b722cc56303c850eb1831sha512: 41831862b0131ae2b1ccbf97136c941f0cc4cc2aee04770beb9ec4578c626e782dc1dafa11a1576f9bcaab36c414bd5e12757e574a956b21244d23fc05c9fc33ssdeep: 3072:lOxXwSmJQMva8zFki2kXbcvpoAD4q56YfZZBpU2mWMEBKCDo2uM+yQTfcyOUXQr4:XJZv5zFiIODmfWlzyOGttype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T18FA4C5E8729593F1EA4C7AF1AB305C9607355B337539603B392B7B440FE6A0188E99F1sha3_384: 956b8103aeb9dee67d7b1a909eaab5834aff4eff2ab015aa7d7b2d3893ed84b8e5e6223c0aa0d8bf4816372a7cc62e81ep_bytes: 558bec6aff68d04d410068c84d400064timestamp: 2009-12-22 05:36:37
Version Info:
0: [No Data]

Dropper.38 also known as:

Bkav	W32.AIDetectMalware
AVG	Win32:Agent-AMKL [Drp]
Elastic	malicious (high confidence)
MicroWorld-eScan	Gen:Variant.Dropper.38
FireEye	Generic.mg.952183e638885cfb
CAT-QuickHeal	VirTool.CeeInject.CR3
Skyhigh	Generic Dropper.sq
McAfee	Generic Dropper.sq
Cylance	unsafe
Zillya	Trojan.Injector.Win32.27940
Sangfor	Suspicious.Win32.Save.ins
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	VirTool:Win32/CeeInject.3c3aea2a
K7GW	Trojan ( 004be7711 )
K7AntiVirus	Trojan ( 004be7711 )
BitDefenderTheta	Gen:NN.ZexaF.36802.DmX@a8yQ7Kp
VirIT	Trojan.Win32.Generic.BUSJ
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.BPJ
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Dropper.Agent-335888
Kaspersky	HEUR:Trojan.Win32.Generic
BitDefender	Gen:Variant.Dropper.38
NANO-Antivirus	Trojan.Win32.Inegery.cvbhew
Avast	Win32:Agent-AMKL [Drp]
Tencent	Trojan.Win32.Inject.e
Emsisoft	Gen:Variant.Dropper.38 (B)
F-Secure	Trojan.TR/Dropper.Gen2
DrWeb	Trojan.StartPage.31364
VIPRE	Gen:Variant.Dropper.38
TrendMicro	TROJ_ADCLCKR.SMB
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan/Generic.be
Varist	W32/Injector.N.gen!Eldorado
Avira	TR/Dropper.Gen2
Antiy-AVL	Trojan[Dropper]/Win32.Inegery
Kingsoft	Win32.HeurC.KVMH017.a
Microsoft	Trojan:Win32/Startpage.HK
Xcitium	TrojWare.Win32.TrojanDropper.Inegery.A@23kosv
Arcabit	Trojan.Dropper.38
ZoneAlarm	HEUR:Trojan.Win32.Generic
GData	Gen:Variant.Dropper.38
Google	Detected
AhnLab-V3	Trojan/Win32.Inegery.R6038
VBA32	BScope.Trojan.StartPage
ALYac	Gen:Variant.Dropper.38
MAX	malware (ai score=100)
Malwarebytes	Generic.Malware.AI.DDS
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_ADCLCKR.SMB
Rising	Trojan.Win32.Inject.fpp (CLASSIC)
Yandex	Trojan.GenAsa!xsQc3Ne8Ymo
Ikarus	Trojan-Dropper.SuspectCRC
MaxSecure	Trojan.Malware.1728868.susgen
Fortinet	W32/Generic.AC.1200989
DeepInstinct	MALICIOUS
alibabacloud	Trojan[dropper]:Win/Generic