Win32/Injector.EQJH (file analysis)

The Win32/Injector.EQJH is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

GridinSoft Anti-Malware

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

6-day free trial available.

What Win32/Injector.EQJH virus can do?

SetUnhandledExceptionFilter detected (possible anti-debug)
Yara rule detections observed from a process memory dump/dropped files/CAPE
The binary likely contains encrypted or compressed data.
Authenticode signature is invalid

How to determine Win32/Injector.EQJH?


File Info:
name: 145C831786FAC8E82392.mlw
path: /opt/CAPEv2/storage/binaries/cce02b0c7c9fa5da0c036b9cab5a4949f29a5f56e0054cd14dab059f1eedf71d
crc32: F5A0E270
md5: 145c831786fac8e82392b547644092b3
sha1: bd1127147fd2a32d6dcbc9c212aac375831eef51
sha256: cce02b0c7c9fa5da0c036b9cab5a4949f29a5f56e0054cd14dab059f1eedf71d
sha512: 02b49eed6b48a0643927418d59df1b30dfb8445820fafc57ebf7bb421a78ba3c6c08f85736698f3480e14c287cf9029a9b55f8430fa2c4663d8085ff7d931037
ssdeep: 24576:76ksGB//gP0baGTkY//wz5WHs2Bn4trPa5AimsNS:76ksGB/0bf1Zw4tQt
type: PE32+ executable (GUI) x86-64, for MS Windows
tlsh: T101659E5BF7A348EDC67BC170469B8372BA70F81806306A2E2B55CF351F25EA0561EB74
sha3_384: e1f7459c33257af2604b299fc73525fd77829e8664779580149dd23d4fa52142ac2aef77d7b02b59f72f110d9c2b39f7
ep_bytes: 4883ec28488b0595421500c700010000
timestamp: 1970-01-01 00:00:00

Version Info:
0: [No Data]

Win32/Injector.EQJH also known as:

Elastic	malicious (high confidence)
MicroWorld-eScan	Trojan.GenericKD.38118477
FireEye	Generic.mg.145c831786fac8e8
ALYac	Trojan.GenericKD.38118477
K7AntiVirus	Trojan ( 005895d11 )
Alibaba	VirTool:Win32/Sysdupate.c8c8b15f
Cybereason	malicious.47fd2a
Symantec	Trojan.Gen.MBT
ESET-NOD32	a variant of Win32/Injector.EQJH
APEX	Malicious
BitDefender	Trojan.GenericKD.38118477
Avast	Win64:Evo-gen [Susp]
Ad-Aware	Trojan.GenericKD.38118477
Emsisoft	Trojan.GenericKD.38118477 (B)
McAfee-GW-Edition	BehavesLike.Win64.Trickbot.tc
Sophos	Mal/Generic-S
Ikarus	Trojan.Win64.Krypt
GData	Trojan.GenericKD.38118477
Avira	TR/Injector.lqoza
MAX	malware (ai score=84)
Microsoft	VirTool:Win32/Sysdupate.gen!E
Cynet	Malicious (score: 100)
McAfee	Artemis!145C831786FA
Malwarebytes	Trojan.ShellCode
TrendMicro-HouseCall	TROJ_GEN.R002H01KP21
SentinelOne	Static AI – Suspicious PE
Fortinet	W32/EQJH!tr
AVG	Win64:Evo-gen [Susp]
Panda	Trj/CI.A

How to remove Win32/Injector.EQJH?

Win32/Injector.EQJH removal tool

Download and install GridinSoft Anti-Malware.
Open GridinSoft Anti-Malware and perform a “Standard scan“.
“Move to quarantine” all items.
Open “Tools” tab – Press “Reset Browser Settings“.
Select proper browser and options – Click “Reset”.
Restart your computer.

About the author

Paul Valéry

I'm a cyber security analyst and data science expert with 5+ years of experience with security software contractors.

Leave a Comment X