Categories: Trojan

Trojan.MSIL.Inject.abrcb (file analysis)

The Trojan.MSIL.Inject.abrcb is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.MSIL.Inject.abrcb virus can do?

Dynamic (imported) function loading detected
Reads data out of its own binary image
CAPE extracted potentially suspicious content
Drops a binary and executes it
The binary contains an unknown PE section name indicative of packing
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Attempts to modify proxy settings

How to determine Trojan.MSIL.Inject.abrcb?


File Info:
name: 3091CECBD7AFAD9A416B.mlwpath: /opt/CAPEv2/storage/binaries/d08f902016f50cddce3dc2addb5d785b10af610938f1d7d2666a18e2b3864738crc32: C547F45Bmd5: 3091cecbd7afad9a416b93b9329d0deasha1: 5febc13ede2dbc649b15e177cdb8b82215aaa941sha256: d08f902016f50cddce3dc2addb5d785b10af610938f1d7d2666a18e2b3864738sha512: 66b0d60f741c3ab16dfc1286541e47d8b39ec5a64107fb839a825f58308536e30593d09dd90f4ff24100d97b98a52981fd3259de1f12b875f9df6d697459fddbssdeep: 12288:l0q747UxkXpWLSeLDYN1l58M+4i3/RCV829mdclKPKDun0iYYO46fF10OQoQ5JBr:l03IxkXpW+gUN1Px+4/V829xlKdEUL5rtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11AF42303ED83E192CF51107A09B203025AADF59693958DE73BDB12582F5EED3A237793sha3_384: 23fa0faf2cea4e8f3c4a8646b95070f316d83f301f2ff3dbe327122a0b2bc6bb8124e7748b7b7e450ed4ee460d07af00ep_bytes: 68900000006800000000687cb84a00e8timestamp: 2016-11-16 22:21:59
Version Info:
Translation: 0x0000 0x04b0

Trojan.MSIL.Inject.abrcb also known as:

Bkav	W32.AIDetect.malware1
Lionic	Trojan.MSIL.Inject.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.36151152
FireEye	Generic.mg.3091cecbd7afad9a
CAT-QuickHeal	PUA.Gamehack.AL5
ALYac	Trojan.GenericKD.36151152
Cylance	Unsafe
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Unwanted-Program ( 004eb0fe1 )
K7GW	Unwanted-Program ( 004eb0fe1 )
Cybereason	malicious.bd7afa
BitDefenderTheta	Gen:NN.ZexaF.34666.UuX@aOxskJpi
Cyren	W32/GenTroj.BA.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
tehtris	Generic.Malware
ESET-NOD32	a variant of Win32/HackTool.CheatEngine.AL potentially unsafe
APEX	Malicious
Paloalto	generic.ml
ClamAV	Win.Trojan.Gamehack-6725407-0
Kaspersky	Trojan.MSIL.Inject.abrcb
BitDefender	Trojan.GenericKD.36151152
NANO-Antivirus	Trojan.Win32.Inject.hqtkjt
Avast	Win32:Malware-gen
Rising	Trojan.Inject!8.103 (CLOUD)
Ad-Aware	Trojan.GenericKD.36151152
TACHYON	Trojan/W32.Inject.769581
Emsisoft	Trojan.GenericKD.36151152 (B)
Comodo	TrojWare.Win32.GameHack.DC@5qhv2d
Zillya	Tool.CheatEngine.Win32.2746
McAfee-GW-Edition	BehavesLike.Win32.AdwareFileTour.bc
Sophos	Mal/Generic-S
SentinelOne	Static AI – Malicious PE
Jiangmin	Trojan.MSIL.gjph
Avira	TR/Inject.etkzp
Microsoft	PWS:Win32/Zbot!ml
GData	Win32.Application.GameHack.L
Cynet	Malicious (score: 100)
AhnLab-V3	Unwanted/Win32.GameHack.C3627910
Acronis	suspicious
McAfee	BackDoor-EIO
MAX	malware (ai score=84)
VBA32	BScope.Trojan.Downloader
Tencent	Malware.Win32.Gencirc.10bb49b5
Yandex	Trojan.GenAsa!VnlNv1LrugE
Ikarus	Trojan.MSIL.Inject
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	W32/Siggen.ACEA!tr
AVG	Win32:Malware-gen
Panda	Trj/CI.A
CrowdStrike	win/grayware_confidence_90% (W)