Lazy.502565 information

The Lazy.502565 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Lazy.502565 virus can do?

• Sample contains Overlay data
• Performs HTTP requests potentially not found in PCAP.
• Reads data out of its own binary image
• CAPE extracted potentially suspicious content
• Drops a binary and executes it
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Attempts to repeatedly call a single API many times in order to delay analysis time
• CAPE detected the embedded win api malware family
• Attempts to modify proxy settings
• Yara detections observed in process dumps, payloads or dropped files

How to determine Lazy.502565?

File Info:
name: C33D43F37E362C82FBD3.mlw
path: /opt/CAPEv2/storage/binaries/343911b29afcec9360071882ec8a447cd729c142e88823632739b58c6756aa73
crc32: 60353AD4
md5: c33d43f37e362c82fbd3ef05c8c9e5f2
sha1: 605b1340266f3a810de40d07237156d55940f8b7
sha256: 343911b29afcec9360071882ec8a447cd729c142e88823632739b58c6756aa73
sha512: e5d865bfa38ae0e1c6d8fc338df1acabb6632ca32ae0d8b0952d194527c9506e68d6534a62b86d41f67ea9027482d5b3da06b4d0461aca7e88a9b54e5877347a
ssdeep: 768:7QN8Fmy2AcYNZ192P2F4bpu9fWWq53EEP1oC4jtO72u:7QN8VxzBTybpu9fWWq53XoCT72u
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T16C03A3786FC559B6E377C2B6C9F2D6C6A436BD6778169D0C60CA33014833B43A8A1D1E
sha3_384: 9d0c50595c192214bf57c183b9f07cdb8c751623d6da91da6fd82954a4a6cab82339d5b1201708894d6365004c19bb42
ep_bytes: 60be008050008dbe0090ffff57eb0b90
timestamp: 2013-10-29 08:38:25

Version Info:
0: [No Data]

Lazy.502565 also known as:

How to remove Lazy.502565?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.