Categories: Malware

Win32/Injector.EJNL malicious file

The Win32/Injector.EJNL is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/Injector.EJNL virus can do?

Executable code extraction
Injection (inter-process)
Injection (Process Hollowing)
Creates RWX memory
The binary likely contains encrypted or compressed data.
Executed a process and injected code into it, probably while unpacking
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/Injector.EJNL?


File Info:
crc32: 73F19655md5: ee2a243130c63629a63a88e979219a05name: ugopoundz.exesha1: 8256d7925cfe1208071bf19095abbca61de48892sha256: 94cdb5ee272fb3f26c54f1efae7b9db7a648296241ba8c775c16e8dcdae1d9a3sha512: ff01701378360a15c08b6be6d9cf4764b6951386131f788a2b4dc26ac6df09d150f68af225f3952d321ec1376f79724ba451d9e1451293bf1fb0a6deab0444cdssdeep: 12288:qK71Yam0rWXWtIHAJATeRRPBJFiW0cw9ykreJUuU1ZWZiO71sb2+vgxF:ezt2IHyA4FxiW0/ykri4SEOg2Ogxtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
0: [No Data]

Win32/Injector.EJNL also known as:

MicroWorld-eScan	Trojan.GenericKD.32819014
McAfee	Fareit-FQP!EE2A243130C6
Cylance	Unsafe
Sangfor	Malware
K7AntiVirus	Riskware ( 0040eff71 )
BitDefender	Trojan.GenericKD.32819014
K7GW	Riskware ( 0040eff71 )
CrowdStrike	win/malicious_confidence_90% (W)
Arcabit	Trojan.Generic.D1F4C746
TrendMicro	TSPY_HPLOKI.SMBD
F-Prot	W32/Injector.IQQ
Symantec	ML.Attribute.HighConfidence
ESET-NOD32	a variant of Win32/Injector.EJNL
APEX	Malicious
Avast	Win32:Trojan-gen
Kaspersky	HEUR:Trojan.Win32.Crypt.gen
Alibaba	Trojan:Win32/DelfInject.ali2000015
NANO-Antivirus	Trojan.Win32.TrjGen.gluxxj
Rising	Trojan.Generic@ML.100 (RDML:fVJh//VN2EoF1xBlGBig+g)
Ad-Aware	Trojan.GenericKD.32819014
Emsisoft	Trojan.GenericKD.32819014 (B)
Comodo	Malware@#1q7eet3l2uej5
F-Secure	Trojan.TR/Injector.dzdli
DrWeb	Trojan.Siggen8.63306
VIPRE	Trojan.Win32.Generic!BT
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Fareit.cc
Trapmine	suspicious.low.ml.score
FireEye	Generic.mg.ee2a243130c63629
Sophos	Mal/Generic-S
Cyren	W32/Trojan.VPPT-1786
Avira	TR/Injector.dzdli
Fortinet	W32/Agent.AJFK!tr
Antiy-AVL	Trojan/Win32.Wacatac
Endgame	malicious (high confidence)
Microsoft	Trojan:Win32/Lokibot.ART!eml
ZoneAlarm	HEUR:Trojan.Win32.Crypt.gen
AhnLab-V3	Win-Trojan/Delphiless.Exp
ALYac	Trojan.Agent.FormBook
MAX	malware (ai score=100)
Malwarebytes	Trojan.MalPack.DLF
Panda	Trj/CI.A
TrendMicro-HouseCall	TSPY_HPLOKI.SMBD
SentinelOne	DFI – Malicious PE
MaxSecure	Trojan.Malware.300983.susgen
GData	Trojan.GenericKD.32819014
BitDefenderTheta	Gen:NN.ZelphiF.33556.2GX@aCStugni
AVG	Win32:Trojan-gen
Cybereason	malicious.25cfe1
Paloalto	generic.ml
Qihoo-360	Win32/Trojan.ed1