Malware.AI.1215398687 (file analysis)

The Malware.AI.1215398687 is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Malware.AI.1215398687 virus can do?

• Sample contains Overlay data
• Reads data out of its own binary image
• Drops a binary and executes it
• Unconventionial language used in binary resources: Chinese (Traditional)
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• The executable is compressed using UPX
• Authenticode signature is invalid
• Yara rule detections observed from a process memory dump/dropped files/CAPE

How to determine Malware.AI.1215398687?

File Info:
name: B10041014E67DC5551D4.mlw
path: /opt/CAPEv2/storage/binaries/56bb043900901243b9d67c6f9d033d92f14f20802389e2b6e4e67d81e189e448
crc32: D6791789
md5: b10041014e67dc5551d4e1e55bf02606
sha1: eda188c0cc158b5d1ba7f99d3b36c428f9d7286c
sha256: 56bb043900901243b9d67c6f9d033d92f14f20802389e2b6e4e67d81e189e448
sha512: 6f9c211365c9fd08c44e8a6587eedfad567bb54485a2b099df5c6d33dbeb4a1b7fde188536d7a9e4d6ef7fdead62ca357485bfcd9da86af199ee0674ed6590a7
ssdeep: 3072:6o2k1czUt7gNj5HZxF8e2zlFuBxikOSzYVl3SIBrnG4OzrPmbJmRQyNbFz2D:D8Uu3H8e2zWBWl3NG4OzLTQWR2D
type: PE32 executable (GUI) Intel 80386, for MS Windows
tlsh: T10904120DE6106ED6DAD6C771A39340276AF46100423AE3DF0D63D2ED29F260D687E633
sha3_384: c85a5637f55d32a11d984503b1e7414c64af7706491fbac92e5fb8727195079466158263b26e72a0ee731e47b8df259d
ep_bytes: 60be00b040008dbe0060ffff5783cdff
timestamp: 2009-07-10 12:55:44

Version Info:
CompanyName: Egis Technology Inc.
FileDescription: MyWinLocker SelfExtractor
FileVersion: 3.0.40.0
InternalName: SelfExtractor.exe
LegalCopyright: Copyright 2008 (C) EgisTec Inc. All right reserved.
OriginalFilename: SelfExtractor.exe
ProductVersion: 3.0.40.0
Translation: 0x0409 0x04b0

Malware.AI.1215398687 also known as:

How to remove Malware.AI.1215398687?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.