Categories: Malware

Win32/Injector.APG information

The Win32/Injector.APG is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.APG virus can do?

Behavioural detection: Executable code extraction – unpacking
Yara rule detections observed from a process memory dump/dropped files/CAPE
Creates RWX memory
Dynamic (imported) function loading detected
CAPE extracted potentially suspicious content
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid
Anomalous binary characteristics

How to determine Win32/Injector.APG?


File Info:
name: 4B1BF2051CDFFB5106C2.mlwpath: /opt/CAPEv2/storage/binaries/d4f620b1ac0928f7bc71495710a166b57577cbfa68aae4e637efdcfadf3d7199crc32: 813C1CB4md5: 4b1bf2051cdffb5106c255306e2cc314sha1: 00048d6d7608047c7bd28b2788b04a691db5d21fsha256: d4f620b1ac0928f7bc71495710a166b57577cbfa68aae4e637efdcfadf3d7199sha512: c729d4c369dc6ce7a653fa0563e13bb40183c0e3275e2b1a3cfd683f97511d3cb6d07edb7c3470e80c303c7fb9a57714c5dcab43b5f1a5fc4551c1879fb79678ssdeep: 1536:dL9/Qpwe/jeK8oam6LGu6a3hwsWQ7+3x3Hon:dlQjqTLGi3hwO7+3NHontype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T13B53F2B0EF94B814C0A496365D73C271D467BDAB0EEAE397A8743F2F3DF11185928442sha3_384: fb6a85320cd00e23147b7795a212ebc366dc45e8f6e069a809a445e2f30c78e3ea054d6328401175900f95b515c6d325ep_bytes: b83ca742005064ff3500000000648925timestamp: 2011-12-01 01:47:07
Version Info:
Comments: CompanyName: Auto Debug SystemFileDescription: Kill Process ModuleFileVersion: 1, 1, 1, 10InternalName: KillProcessLegalCopyright: Copyright 2003-2007 Auto Debug SystemLegalTrademarks: OriginalFilename: KillProcess.exePrivateBuild: ProductName: KillProcess ModuleProductVersion: 1, 1, 1, 10SpecialBuild: Translation: 0x0409 0x04b0

Win32/Injector.APG also known as:

Bkav	W32.AIDetect.malware2
Lionic	Trojan.Win32.VBKrypt.4!c
Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKDZ.83026
FireEye	Generic.mg.4b1bf2051cdffb51
ALYac	Trojan.GenericKDZ.83026
Malwarebytes	Malware.AI.3786025197
Zillya	Trojan.VBKrypt.Win32.133633
Sangfor	Trojan.Win32.VBKrypt.iacg
CrowdStrike	win/malicious_confidence_70% (W)
BitDefender	Trojan.GenericKDZ.83026
K7GW	Riskware ( 0040eff71 )
K7AntiVirus	Riskware ( 0040eff71 )
BitDefenderTheta	Gen:NN.ZexaF.34182.di2aamH22Sdi
Cyren	W32/A-76660f26!Eldorado
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.APG
TrendMicro-HouseCall	TROJ_AGENT_005633.TOMB
ClamAV	Win.Packed.Ulise-9760980-0
Kaspersky	Trojan.Win32.VBKrypt.iacg
Alibaba	Trojan:Win32/VBKrypt.e6f7e99a
NANO-Antivirus	Trojan.Win32.Bifrose.oopoh
Rising	Trojan.Win32.VBCode.fqy (CLOUD)
Emsisoft	Trojan.GenericKDZ.83026 (B)
Comodo	Malware@#2m3fky111b89r
DrWeb	Trojan.MulDrop3.19950
VIPRE	Trojan.Win32.Generic!BT
TrendMicro	TROJ_AGENT_005633.TOMB
McAfee-GW-Edition	GenericRXHQ-FQ!4B1BF2051CDF
SentinelOne	Static AI – Malicious PE
Sophos	Mal/Generic-S
APEX	Malicious
Jiangmin	Trojan/VBKrypt.ecmt
Avira	TR/Crypt.PEPM.Gen
MAX	malware (ai score=100)
Microsoft	Trojan:Win32/Wacatac.B!ml
GData	Trojan.GenericKDZ.83026
Cynet	Malicious (score: 100)
AhnLab-V3	Trojan/Win32.VBKrypt.R16793
McAfee	GenericRXHQ-FQ!4B1BF2051CDF
VBA32	Trojan.VBKrypt
Cylance	Unsafe
Panda	Trj/Genetic.gen
Tencent	Malware.Win32.Gencirc.10b86ff6
Yandex	Trojan.VBKrypt!t3dJQxKPRJ4
Ikarus	Trojan.Win32.VBKrypt
Fortinet	W32/Magania.IDPJ!tr
AVG	Win32:Trojan-gen
Cybereason	malicious.51cdff
Avast	Win32:Trojan-gen