Categories: Malware

Generic.Dacic.DED21A61.A.49D70D53 (file analysis)

The Generic.Dacic.DED21A61.A.49D70D53 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Generic.Dacic.DED21A61.A.49D70D53 virus can do?

Behavioural detection: Executable code extraction – unpacking
A file was accessed within the Public folder.
Sample contains Overlay data
Uses Windows utilities for basic functionality
CAPE extracted potentially suspicious content
Drops a binary and executes it
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Executable file is packed/obfuscated with MPRESS
Authenticode signature is invalid
Uses suspicious command line tools or Windows utilities
Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Generic.Dacic.DED21A61.A.49D70D53?


File Info:
name: D14FB79629106F1FF119.mlwpath: /opt/CAPEv2/storage/binaries/9c1e948baa76435b06ad204abdab24083913a69ee40e539455eacdebf3145cb0crc32: E897FA64md5: d14fb79629106f1ff119ed890259d969sha1: d8fd82699df57d6f52f967f14492352ad22b6839sha256: 9c1e948baa76435b06ad204abdab24083913a69ee40e539455eacdebf3145cb0sha512: d7723175378809f2b168a618fdfa80e077ef8507f41e758c3901a7d73f825b9ca0377fb42bec352b83b81c875458ed62d41596ce529bef8d0f358a8c8ec010d5ssdeep: 1536:d+L8V2eJkJG6bFSZHALyaqrd4Xwohhhh8:d3+JG6ZSZHDaqZ4Xwohhhh8type: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1FA334AC5EBA1889DD26887F016764AB39427EC497B124E9BC7C0FD3D58374CE8D1628Esha3_384: 96bcd9c21c44fb59f6a539df35d29ab3ee90aa81da1261f15c553231e9d813819e8f8de95c8a50bd1820272b9f0af276ep_bytes: 558bec6aff68c845400068ae30400064timestamp: 2017-05-28 15:44:20
Version Info:
Comments: OMFG StudioCompanyName: OMFG StudioFileDescription: Clien Local RunPross AutoFileVersion: 32, 2,34, 5374InternalName: ClockLegalCopyright: OMFG Studio All rights reserved.LegalTrademarks: OriginalFilename: Clock.exePrivateBuild: ProductName: Clock.exeProductVersion: 32, 2,34, 5374SpecialBuild: Translation: 0x0804 0x04b0

Generic.Dacic.DED21A61.A.49D70D53 also known as:

Bkav	W32.AIDetectMalware
Elastic	malicious (high confidence)
DrWeb	Trojan.DownLoader24.63361
MicroWorld-eScan	DeepScan:Generic.Dacic.DED21A61.A.49D70D53
Malwarebytes	Generic.Malware.AI.DDS
Zillya	Trojan.Magania.Win32.75132
Sangfor	Suspicious.Win32.Save.ins
K7AntiVirus	Trojan ( 0052964f1 )
K7GW	Trojan ( 00560bb71 )
Cybereason	malicious.99df57
BitDefenderTheta	Gen:NN.ZexaF.36662.dq1@aSESn3hj
Cyren	W32/ServStart.Z.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/ServStart.OP
APEX	Malicious
ClamAV	Win.Malware.Bavs-6804154-0
Kaspersky	Trojan-GameThief.Win32.Magania.uhbd
BitDefender	DeepScan:Generic.Dacic.DED21A61.A.49D70D53
NANO-Antivirus	Trojan.Win32.Magania.epgxys
Avast	Win32:Evo-gen [Trj]
Tencent	Malware.Win32.Gencirc.10bf1753
Emsisoft	DeepScan:Generic.Dacic.DED21A61.A.49D70D53 (B)
F-Secure	Trojan.TR/ServStart.bwojd
VIPRE	DeepScan:Generic.Dacic.DED21A61.A.49D70D53
McAfee-GW-Edition	BehavesLike.Win32.Generic.pm
Trapmine	malicious.high.ml.score
FireEye	Generic.mg.d14fb79629106f1f
Sophos	Troj/Agent-BCHT
SentinelOne	Static AI – Malicious PE
GData	Win32.Trojan.PSE.10FZMY3
Jiangmin	Trojan.Generic.azxao
Google	Detected
Avira	TR/ServStart.bwojd
MAX	malware (ai score=89)
Antiy-AVL	Virus/Win32.Expiro.imp
Xcitium	TrojWare.Win32.ServStart.CB@7486ss
Arcabit	DeepScan:Generic.Dacic.DED21A61.A.49D70D53
ZoneAlarm	Trojan-GameThief.Win32.Magania.uhbd
Microsoft	DDoS:Win32/Nitol!atmnm
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win.Magania.C5473132
VBA32	BScope.Trojan.Downloader
ALYac	DeepScan:Generic.Dacic.DED21A61.A.49D70D53
Cylance	unsafe
Panda	Trj/GdSda.A
Zoner	Trojan.Win32.88636
Rising	Downloader.Unruy!8.D8 (TFE:5:FGdIfFpxOuK)
Yandex	Trojan.GenAsa!tTgzBkWN6RQ
Ikarus	Backdoor.Win32.Inject
Fortinet	W32/GenKryptik.AWIY!tr
AVG	Win32:Evo-gen [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_100% (D)