Categories: Trojan

Should I remove “TrojanDropper:Win32/Small!A”?

The TrojanDropper:Win32/Small!A is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanDropper:Win32/Small!A virus can do?

Sample contains Overlay data
Uses Windows utilities for basic functionality
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Attempts to modify proxy settings
Creates a copy of itself
Touches a file containing cookies, possibly for information gathering
Uses suspicious command line tools or Windows utilities

How to determine TrojanDropper:Win32/Small!A?


File Info:
name: 5B21BD612E8C448A6486.mlwpath: /opt/CAPEv2/storage/binaries/b29f4fac22746f2ebb9a0aef8e1a84fd44a852f99057231d1b6679b76534af50crc32: 0F1AD335md5: 5b21bd612e8c448a6486ece34ab20c56sha1: 8bb0ee725a36fd36d0a08f5011e8ab0e54261748sha256: b29f4fac22746f2ebb9a0aef8e1a84fd44a852f99057231d1b6679b76534af50sha512: bd747f56bccba0db16c94c783b9d69f37ba28d04cdb30cf179bc9419f727071d7dda393ba7a0c9d46f59a974797c402cdd02d9508abfaf913de1aeda2dfde9b5ssdeep: 384:HgPv/tR5NdxXxATkB+Rua4qvWWX/PAkvPW75G92dw:HuVd9xAIBRaH+sIkvPWutype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T101437D92FD65C871E051D9BC8E0DC666AB3632563D7C114678AE8FCCE82F6341D2CA82sha3_384: f8140763d08166f3aba3a2882151cc4b4a64b15c6b002cb826d4a4d2ed8335673d62ef8e6bba96842df7fff5d260d23cep_bytes: 558becb9060000006a006a004975f951timestamp: 1987-09-11 01:35:02
Version Info:
0: [No Data]

TrojanDropper:Win32/Small!A also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Small.a!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Generic.Malware.SYdr!dld!.260811BB
FireEye	Generic.mg.5b21bd612e8c448a
Skyhigh	BehavesLike.Win32.Ipamor.qz
McAfee	Downloader-JK.a
Cylance	unsafe
Zillya	Downloader.Small.Win32.35804
Sangfor	Trojan.Win32.Save.a
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	TrojanDownloader:Win32/Spywad.39f441a8
K7GW	Trojan ( 00544ddf1 )
K7AntiVirus	Trojan ( 00544ddf1 )
Arcabit	Generic.Malware.SYdr!dld!.D3FACBBB
VirIT	Trojan.Win32.Generic.OLJ
Symantec	Downloader
ESET-NOD32	Win32/TrojanDownloader.Small.NGD
Cynet	Malicious (score: 100)
APEX	Malicious
ClamAV	Win.Downloader.Small-2705
Kaspersky	Trojan-Downloader.Win32.Delf.sf
BitDefender	Generic.Malware.SYdr!dld!.260811BB
NANO-Antivirus	Trojan.Win32.Delf.earnrm
Avast	Win32:Trojano-AFY [Trj]
Tencent	Win32.Trojan-Downloader.Delf.Aplw
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Dldr.Spywad.L
DrWeb	Trojan.DownLoader.970
VIPRE	Generic.Malware.SYdr!dld!.260811BB
TrendMicro	TROJ_FRS.0NA103B424
Trapmine	malicious.high.ml.score
Emsisoft	Generic.Malware.SYdr!dld!.260811BB (B)
SentinelOne	Static AI – Malicious PE
Jiangmin	TrojanDownloader.Small.mex
Varist	W32/Heuristic-114!Eldorado
Avira	TR/Dldr.Spywad.L
Antiy-AVL	GrayWare/Win32.Kryptik.pe
Kingsoft	Win32.Troj.Undef.a
Xcitium	TrojWare.Win32.TrojanDownloader.Small.NGD@11kr
Microsoft	TrojanDropper:Win32/Small.gen!A
ZoneAlarm	Trojan-Downloader.Win32.Delf.sf
GData	Generic.Malware.SYdr!dld!.260811BB
Google	Detected
AhnLab-V3	Malware/Gen.Generic.R483895
Acronis	suspicious
VBA32	Trojan.Win32.Small.102210
ALYac	Generic.Malware.SYdr!dld!.260811BB
MAX	malware (ai score=100)
Panda	Trj/Genetic.gen
TrendMicro-HouseCall	TROJ_FRS.0NA103B424
Rising	Trojan.DL.Delf.bfe (CLASSIC)
Yandex	Trojan.GenAsa!MehRCk5tLEg
Ikarus	Trojan.Win32.ProcessHijack
MaxSecure	Trojan.Malware.1220407.susgen
Fortinet	W32/Small.CDJ!tr.dldr
BitDefenderTheta	AI:Packer.691A12F31E
AVG	Win32:Trojano-AFY [Trj]
DeepInstinct	MALICIOUS