Categories: Malware

PWS:Win32/Ldpinch.CX malicious file

The PWS:Win32/Ldpinch.CX is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What PWS:Win32/Ldpinch.CX virus can do?

Sample contains Overlay data
Unconventionial binary language: Chinese (Simplified)
Unconventionial language used in binary resources: Chinese (Simplified)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid

How to determine PWS:Win32/Ldpinch.CX?


File Info:
name: C8312C0B21A1CFB5FF15.mlwpath: /opt/CAPEv2/storage/binaries/aea0110d19f5f4e323246b7b70fde7d4a0cb25d3a430af8be43435004197ada8crc32: E88586B5md5: c8312c0b21a1cfb5ff153496d1d5cdcdsha1: 8586ada2a7604fc0fc64e08cb28fd45bc6e031ddsha256: aea0110d19f5f4e323246b7b70fde7d4a0cb25d3a430af8be43435004197ada8sha512: 98911361c297a2e21da35f703444fdc3951216b6daeaacc38458b55993045122e9ab5f729a31bfe6eb058886f350f1fa127ef2c6a9c4084de386683709a6d90dssdeep: 12288:bqSnlI4MoNPDDBxzKZFFR0Ut5o9JBzdHFQOOVdnoa/eShFiXQAIL024GJ:bplIf2bjzKZFFRNt2+ndnoa/e+FiX3j2type: PE32 executable (DLL) (GUI) Intel 80386, for MS Windowstlsh: T120F45C32F6908537D1732A389D6B92699C2ABF116E34794B3BF83D4C5F392813935293sha3_384: 772214d8f36c7d17750cb1c9029097f5f4f3e88f5cfe9b55153074286916422c44c2b18b0bc756724fb5de18f0ac004fep_bytes: 558bec83c4c4b8f0604900e88cfff6fftimestamp: 1992-06-19 22:22:17
Version Info:
CompanyName: FileDescription: FileVersion: 3.8.3.49InternalName: LegalCopyright: LegalTrademarks: OriginalFilename: ProductName: ProductVersion: 1.0.0.0Comments: Translation: 0x0804 0x03a8

PWS:Win32/Ldpinch.CX also known as:

Lionic	Trojan.Win32.Asper.los5
MicroWorld-eScan	Gen:Variant.Genie.448
FireEye	Generic.mg.c8312c0b21a1cfb5
Skyhigh	GenericR-CMV!C8312C0B21A1
McAfee	GenericR-CMV!C8312C0B21A1
VIPRE	Gen:Variant.Genie.448
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_90% (W)
Alibaba	Backdoor:Win32/Salasana.cd065261
K7GW	Trojan ( 7000000f1 )
K7AntiVirus	Trojan ( 7000000f1 )
VirIT	Trojan.Win32.BHO.NQX
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/BHO.OAV
APEX	Malicious
ClamAV	Win.Trojan.Asper-11
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Variant.Genie.448
NANO-Antivirus	Trojan.Win32.Asper.csfsc
Avast	Win32:Delf-NZO [Trj]
Tencent	Malware.Win32.Gencirc.10b7696e
Emsisoft	Gen:Variant.Genie.448 (B)
Baidu	Win32.Trojan.BHO.i
F-Secure	Trojan.TR/ATRAPS.Gen
DrWeb	BackDoor.Click.1068
Zillya	Backdoor.Asper.Win32.16
TrendMicro	TROJ_AGENT_027712.TOMB
Sophos	Mal/Banker-DQ
SentinelOne	Static AI – Suspicious PE
GData	Gen:Variant.Genie.448
Jiangmin	Backdoor/Asper.an
Webroot	W32.Trojan.Bho.Gen
Google	Detected
Avira	TR/ATRAPS.Gen
Varist	W32/Agent.HP.gen!Eldorado
Antiy-AVL	Trojan[Backdoor]/Win32.Asper
Kingsoft	Win32.Hack.Generic.a
Xcitium	TrojWare.Win32.BHO.VAE@2ndgle
Arcabit	Trojan.Genie.448
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	PWS:Win32/Ldpinch.CX
Cynet	Malicious (score: 100)
AhnLab-V3	Backdoor/Win32.Asper.R21509
VBA32	Backdoor.Asper
ALYac	Gen:Variant.Genie.448
Cylance	unsafe
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_AGENT_027712.TOMB
Rising	Malware.Ldpinch!8.EC20 (TFE:5:S2Vr7IpUrXQ)
Yandex	Trojan.BHO!PdPSyFU679k
Ikarus	Trojan.BHO
MaxSecure	Trojan.Malware.121218.susgen
Fortinet	W32/BHO.OAV!tr
AVG	Win32:Delf-NZO [Trj]
DeepInstinct	MALICIOUS