Categories: Malware

VirTool:Win32/DelfInject!CF information

The VirTool:Win32/DelfInject!CF is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/DelfInject!CF virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Reads data out of its own binary image
Unconventionial language used in binary resources: Russian
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Anomalous binary characteristics

How to determine VirTool:Win32/DelfInject!CF?


File Info:
name: 0AC6C332121B81B0B93B.mlwpath: /opt/CAPEv2/storage/binaries/a790aa213a6391818156792d60f77051567e13e4db3492db63779a2b3960d57acrc32: C5B8A2A7md5: 0ac6c332121b81b0b93b07c988b1b93dsha1: e9270dc0ed566b6bede6277264df95f7d9707adcsha256: a790aa213a6391818156792d60f77051567e13e4db3492db63779a2b3960d57asha512: 350fcd26ec38f2992ca2dbcf5a0d8896a1885860412ba344028132e3838cea9a475b1d7cd7ecef8f4e6d217156d6127676d404aee6096f0a7e5fd9b582f7d053ssdeep: 196608:QGguJrG54u25HbgIFLCUtUdMwdTO7aURdPIRWcfmJxKGzc:7bu258cvt81JOfwWemrbctype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T192863317EA624AF5E429353CDC50B16B5F6FFC50373A8661E7CC488A243A1E9A3543F2sha3_384: 22a1e3ea91bbcd41a3970f397f3f8a7786a533c38c079719418272e0e551cb424b653eac930bb6e5d2b33b9cb0e1b78cep_bytes: 558becb9080000006a006a004975f951timestamp: 1992-06-19 22:22:17
Version Info:
Translation: 0x0409 0x04b0ProductName: Project1FileVersion: 1.00ProductVersion: 1.00InternalName: xxxOriginalFilename: xxx.exe

VirTool:Win32/DelfInject!CF also known as:

Lionic	Trojan.Win32.Generic.lqWn
Cynet	Malicious (score: 99)
FireEye	Generic.mg.0ac6c332121b81b0
McAfee	GenericR-KIT!0AC6C332121B
Cylance	Unsafe
Zillya	Trojan.Buterat.Win32.1
Sangfor	Backdoor.Win32.Buterat.coe
CrowdStrike	win/malicious_confidence_100% (W)
Alibaba	Backdoor:Win32/Buterat.46e9452b
K7GW	Trojan ( 0055e3991 )
K7AntiVirus	Trojan ( 0055e3991 )
Cyren	W32/Agent.LN.gen!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.JDH
APEX	Malicious
ClamAV	Win.Trojan.Buterat-423
Kaspersky	Backdoor.Win32.Buterat.coe
BitDefender	Backdoor.Generic.687375
NANO-Antivirus	Trojan.Win32.Carberp.ryrnf
MicroWorld-eScan	Backdoor.Generic.687375
Avast	Win32:Crypt-KHZ [Trj]
Tencent	Malware.Win32.Gencirc.114960fa
Emsisoft	Backdoor.Generic.687375 (B)
Comodo	TrojWare.Win32.Injector.ixq@4ay6ds
DrWeb	Trojan.Winlock.3300
VIPRE	Virtool.Win32.Obfuscator.as!b (v)
TrendMicro	TSPY_BUTERAT_BK0834D8.TOMC
McAfee-GW-Edition	BehavesLike.Win32.Generic.wc
Sophos	Mal/SpyEye-Y
Jiangmin	Trojan/Agent.ewds
Avira	BDS/Buterat.coe
Antiy-AVL	Trojan/Generic.ASMalwS.16F16
Gridinsoft	Ransom.Win32.Zbot.sa
Microsoft	VirTool:Win32/DelfInject.gen!CF
ViRobot	Backdoor.Win32.A.Buterat.140426
ZoneAlarm	Backdoor.Win32.Buterat.coe
GData	Backdoor.Generic.687375
AhnLab-V3	Backdoor/Win32.Buterat.R12158
BitDefenderTheta	AI:Packer.BB369F6719
ALYac	Backdoor.Generic.687375
MAX	malware (ai score=89)
VBA32	Backdoor.Buterat
Malwarebytes	Malware.AI.3196125151
TrendMicro-HouseCall	TSPY_BUTERAT_BK0834D8.TOMC
Rising	HackTool.DelfInject!8.B26 (CLOUD)
Yandex	Trojan.Injector!QXE/Ft57ma4
Ikarus	Trojan-PWS.Win32.Zbot
Fortinet	W32/Injector.JDH!tr
AVG	Win32:Crypt-KHZ [Trj]
Cybereason	malicious.2121b8
Panda	Trj/Genetic.gen