Categories: Malware

VirTool:Win32/Obfuscator.JE (file analysis)

The VirTool:Win32/Obfuscator.JE is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What VirTool:Win32/Obfuscator.JE virus can do?

Authenticode signature is invalid

How to determine VirTool:Win32/Obfuscator.JE?


File Info:
name: F534FBB990198A35C0F1.mlwpath: /opt/CAPEv2/storage/binaries/4332c71e0d509241f39523fac25f35408c8996d3a2340a14ef9477ad0b3b6aa1crc32: 5EE150B9md5: f534fbb990198a35c0f1c2d8928403a6sha1: b18b8dfa904e6cae8feb5e12bb39a03eb533e0desha256: 4332c71e0d509241f39523fac25f35408c8996d3a2340a14ef9477ad0b3b6aa1sha512: 0915841fbdcc9f1fb94a061b288767dd6ddf89c6295fc30d276c6a19272706b3b6aa648cd81e3a8c4febf18336e3db553bf49176909bc50aa295e6031923235assdeep: 3072:0AdQmlKwSOkRdCo8tUSSFX7S1XIvCkj12FvSyKok/b/rHokahZIbwg3bQ7Ke:01w4CVtXIvCi12FvQrrHEMkgtype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T1286412E8FDA438B9D7CB00B9187DCD61A475FD7605C58E6A39223E14E0339D78B086B9sha3_384: bce127e66a69a59a79276cf673c7421f3216127067652ddeb073a0ad415f3ffd2002bc2e61090c6417a9c24bde427969ep_bytes: 558bec81c4f0fbffffbbe50000008adbtimestamp: 2010-06-17 15:44:03
Version Info:
FileVersion: 1.3.0.0ProductVersion: 1.3CompanyName: Four-FFileDescription: Kernel Mode Driver ManagerInternalName: KmdManagerLegalCopyright: Copyright © 2002-2005 Four-FOriginalFilename: KmdManager.exeProductName: Kernel Mode Driver ManagerTranslation: 0x0409 0x04b0

VirTool:Win32/Obfuscator.JE also known as:

Bkav	W32.AIDetectMalware
DrWeb	Trojan.WinSpy.711
MicroWorld-eScan	Gen:Heur.Mint.Zard.24
FireEye	Generic.mg.f534fbb990198a35
CAT-QuickHeal	VirTool.Obfuscator.JE
Skyhigh	Generic Dropper.tp
ALYac	Gen:Heur.Mint.Zard.24
Malwarebytes	Crypt.Trojan.Malicious.DDS
VIPRE	Gen:Heur.Mint.Zard.24
Sangfor	Trojan.Win32.Save.a
K7AntiVirus	Trojan ( 004e50b51 )
BitDefender	Gen:Heur.Mint.Zard.24
K7GW	Trojan ( 004e50b51 )
Cybereason	malicious.a904e6
BitDefenderTheta	Gen:NN.ZexaF.36792.tu0@aaWDM0gi
Symantec	ML.Attribute.HighConfidence
Elastic	malicious (high confidence)
ESET-NOD32	a variant of Win32/Kryptik.EIM
APEX	Malicious
ClamAV	Win.Trojan.Generic-6260334-0
Kaspersky	Backdoor.Win32.Lavandos.a
Alibaba	Backdoor:Win32/Lavandos.ff271902
NANO-Antivirus	Trojan.Win32.Vidro.ryrqs
Rising	Malware.Undefined!8.C (TFE:2:fl3BVJxVCSN)
Sophos	Mal/Generic-S
F-Secure	Trojan.TR/Crypt.ZPACK.Gen
TrendMicro	TROJ_KRYPTIK.SM
Trapmine	malicious.high.ml.score
Emsisoft	Gen:Heur.Mint.Zard.24 (B)
SentinelOne	Static AI – Malicious PE
MAX	malware (ai score=100)
GData	Gen:Heur.Mint.Zard.24
Webroot	W32.Malware.Gen
Google	Detected
Avira	TR/Crypt.ZPACK.Gen
Varist	W32/Troj_Obfusc.Q.gen!Eldorado
Kingsoft	Win32.Hack.Lavandos.a
Xcitium	TrojWare.Win32.Kryptik.EIM@1smyx8
Arcabit	Trojan.Mint.Zard.24
ZoneAlarm	Backdoor.Win32.Lavandos.a
Microsoft	VirTool:Win32/Obfuscator.JE
Cynet	Malicious (score: 100)
AhnLab-V3	Win-Trojan/SpamBot2.Gen
VBA32	Trojan.Ahent.0322
DeepInstinct	MALICIOUS
Cylance	unsafe
Panda	Trj/StartPage.DAW
TrendMicro-HouseCall	TROJ_KRYPTIK.SM
Tencent	Win32.Backdoor.Lavandos.Xmhl
Yandex	Trojan.DR.Vidro.Gen
Ikarus	Trojan-Dropper.Win32.Vidro
MaxSecure	Backdoor.Lavandos.a
Fortinet	W32/Injector.EDD8!tr
AVG	Win32:Bamital-T [Drp]
Avast	Win32:Bamital-T [Drp]
CrowdStrike	win/malicious_confidence_90% (D)