Categories: Malware

Packer.YodaBased.B (file analysis)

The Packer.YodaBased.B is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Packer.YodaBased.B virus can do?

Reads data out of its own binary image
The binary likely contains encrypted or compressed data.
Checks for the presence of known devices from debuggers and forensic tools
Anomalous binary characteristics

How to determine Packer.YodaBased.B?


File Info:
crc32: 05F8151Fmd5: 5a4159ccf32d709acb315c93888bfd3aname: 5A4159CCF32D709ACB315C93888BFD3A.mlwsha1: cd2757ae7faffd6e71515c526c13a56e8701928esha256: 19a904758c35a94c317a4729f4f5a8eb30e3b6c703385db76079d803929c2363sha512: a86ae79b0f97476729d8fef61bbc76914ca7c3461865cfe031e019c42e288d64c249262e1c9707f44a8816dcb7117710d44fa939549d70de81eb995ddd4025c4ssdeep: 12288:Fa+jXP8v4bXZ2rqBv+d5E+afUZfU8yTXIcXSz0E91Gp:Fa+LJ8OF+d5WQfU8ytXSH91Gtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright (C) 2021InternalName: AAAAFileVersion: 1, 0, 0, 1CompanyName: LegalTrademarks: ProductName: Application AAAAProductVersion: 1, 0, 0, 1FileDescription: Application MFC AAAAOriginalFilename: AAAA.EXETranslation: 0x040c 0x04b0

Packer.YodaBased.B also known as:

Bkav	W32.AIDetect.malware1
Elastic	malicious (high confidence)
DrWeb	BackDoor.Spy.422
MicroWorld-eScan	Packer.YodaBased.B
ALYac	Packer.YodaBased.B
Malwarebytes	Malware.Heuristic.1003
CrowdStrike	win/malicious_confidence_90% (W)
Cybereason	malicious.cf32d7
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
Avast	FileRepMalware
Cynet	Malicious (score: 100)
Kaspersky	UDS:Trojan.Win32.Generic
BitDefender	Packer.YodaBased.B
Ad-Aware	Packer.YodaBased.B
Sophos	Generic ML PUA (PUA)
Comodo	Backdoor.Win32.Hupigon.bolr@1oqk2t
McAfee-GW-Edition	BehavesLike.Win32.BadFile.jc
FireEye	Generic.mg.5a4159ccf32d709a
Emsisoft	Packer.YodaBased.B (B)
SentinelOne	Static AI – Malicious PE
Gridinsoft	Trojan.Heur!.0301A0A1
Arcabit	Packer.YodaBased.B
ZoneAlarm	Packed.Multi.MultiPacked.gen
GData	Packer.YodaBased.B
McAfee	Artemis!5A4159CCF32D
MAX	malware (ai score=84)
VBA32	TScope.Malware-Cryptor.SB
Rising	Malware.Heuristic!ET#87% (RDMK:cmRtazpijFNlZBjhvn/xFoiF32Wc)
Ikarus	Packer.YodaBased.B
eGambit	Unsafe.AI_Score_72%
AVG	FileRepMalware
Paloalto	generic.ml
Qihoo-360	HEUR/QVM18.1.8AC7.Malware.Gen