Trojan.Win32.Copak.aswfv (file analysis)

The Trojan.Win32.Copak.aswfv is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Trojan.Win32.Copak.aswfv virus can do?

• Reads data out of its own binary image
• The binary contains an unknown PE section name indicative of packing
• The binary likely contains encrypted or compressed data.
• Authenticode signature is invalid
• CAPE detected the shellcode get eip malware family
• Yara detections observed in process dumps, payloads or dropped files

How to determine Trojan.Win32.Copak.aswfv?

File Info:
name: BE7CBCDCE1C9425FB2F0.mlw
path: /opt/CAPEv2/storage/binaries/805008002ec0a677d87cb53f56577b8112935e9f97fbb5ee8325c8cdd557308f
crc32: C4C5CB60
md5: be7cbcdce1c9425fb2f076a1ddf7de78
sha1: b202045fa66c445b3260061f4029c25fc5382ab2
sha256: 805008002ec0a677d87cb53f56577b8112935e9f97fbb5ee8325c8cdd557308f
sha512: bb9af7bd8d943ebc6a86ffdc795fb351ca5daf3fc639ad409d84c76e48d5ff8553ba9bd0f48335a9852179526afedcbd1f041f61880337813a2e8c8d29f99818
ssdeep: 6144:RNk0rssHZ2YIruhOIEhUjxSbn7Jg+vtfXp:RNkAssHZhIuhohEMz7e+vtfp
type: PE32 executable (console) Intel 80386, for MS Windows
tlsh: T15724CFB08708DA82E9EF04F4CAE960236DD5ADA1153BB9075A546ED4036115EF3EF3F8
sha3_384: 38aafdf127263efa325a692d187ac3854a65930ae97e65f874e0db906699849da4e79b9a8f740df0d292cea4231e61c2
ep_bytes: 93d1782fc3b8fca8c659f539d41b9d83
timestamp: 1971-05-16 00:00:00

Version Info:
0: [No Data]

Trojan.Win32.Copak.aswfv also known as:

How to remove Trojan.Win32.Copak.aswfv?

• Download and install GridinSoft Anti-Malware.
• Open GridinSoft Anti-Malware and perform a “Standard scan“.
• “Move to quarantine” all items.
• Open “Tools” tab – Press “Reset Browser Settings“.
• Select proper browser and options – Click “Reset”.
• Restart your computer.