Categories: Trojan

Win32/TrojanDownloader.Delf.DCU malicious file

The Win32/TrojanDownloader.Delf.DCU is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What Win32/TrojanDownloader.Delf.DCU virus can do?

Presents an Authenticode digital signature
Creates RWX memory
Unconventionial language used in binary resources: Hebrew
Network activity detected but not expressed in API logs
Anomalous binary characteristics

How to determine Win32/TrojanDownloader.Delf.DCU?


File Info:
crc32: 51232C97md5: 54a4be7037ecdb031563998906a365cdname: 54A4BE7037ECDB031563998906A365CD.mlwsha1: e19e35a43087696fc4e7ac0dfeea4ea19fed8f28sha256: 248eabc9c97d8c4994c26c88cf1806ea9274eb187e3eb0bae7ae8035c7f3b189sha512: 515c6edb804b85cdaa610a275cfda7490884a42dc5c1585681d13d644c0e5b2ef363dff586e24e1a44410db85e49ee3e2c9737b865f1f9e84271dc5800dbd60dssdeep: 12288:9Esf2663Kqz+uv5+lBNErkAfhK6Pl7bDDnfvcfYM:KsO68So+svZb3YYMtype: PE32 executable (GUI) Intel 80386, for MS Windows
Version Info:
LegalCopyright: Copyright xa9 2009 - 2013 Nir SoferInternalName: DocumentFileVersion: 1.35CompanyName: DocumentProductName: DocumentStartupProductVersion: 1.35FileDescription: DocumentOriginalFilename: DocumentTranslation: 0x0409 0x04b0

Win32/TrojanDownloader.Delf.DCU also known as:

Bkav	W32.AIDetectVM.malware1
MicroWorld-eScan	Trojan.GenericKD.35971496
FireEye	Generic.mg.54a4be7037ecdb03
CAT-QuickHeal	Trojan.Multi
McAfee	Fareit-FZO!54A4BE7037EC
Cylance	Unsafe
VIPRE	Trojan.Win32.Generic!BT
Sangfor	Malware
BitDefender	Trojan.GenericKD.35971496
Cybereason	malicious.037ecd
Cyren	W32/Trojan.AWBT-6701
Symantec	ML.Attribute.HighConfidence
Avast	Win32:Malware-gen
Kaspersky	HEUR:Trojan-Ransom.Win32.Blocker.gen
Alibaba	TrojanDownloader:Win32/Blocker.4af7dadc
ViRobot	Trojan.Win32.Z.Highconfidence.723744
AegisLab	Trojan.Win32.Blocker.j!c
Rising	Downloader.Delf!8.16F (TFE:4:o1xB3CNbqnR)
Ad-Aware	Trojan.GenericKD.35971496
Emsisoft	Trojan.GenericKD.35971496 (B)
Comodo	Malware@#2wywlg8y2zpa0
F-Secure	Trojan.TR/AD.DbatLdr.bqqgo
Zillya	Downloader.Delf.Win32.60402
TrendMicro	Ransom_Blocker.R03BC0PA521
McAfee-GW-Edition	Fareit-FZO!54A4BE7037EC
Sophos	Mal/Generic-S
Ikarus	Trojan-Downloader.Win32.Delf
eGambit	PE.Heur.InvalidSig
Avira	TR/AD.DbatLdr.bqqgo
Antiy-AVL	Trojan[Ransom]/Win32.Blocker
Kingsoft	Win32.Troj.Generic_a.a.(kcloud)
Microsoft	Trojan:Win32/Ymacco.AA24
Gridinsoft	Trojan.Win32.Downloader.oa
Arcabit	Trojan.Generic.D224E1A8
ZoneAlarm	HEUR:Trojan-Ransom.Win32.Blocker.gen
GData	Trojan.GenericKD.35971496
Cynet	Malicious (score: 90)
AhnLab-V3	Malware/Win32.Generic.C4287760
BitDefenderTheta	Gen:NN.ZelphiF.34760.SG2@a4R!MumQ
ALYac	Trojan.GenericKD.35971496
VBA32	TScope.Trojan.Delf
Malwarebytes	Trojan.MalPack.DLF
Panda	Trj/CI.A
ESET-NOD32	Win32/TrojanDownloader.Delf.DCU
TrendMicro-HouseCall	Ransom_Blocker.R03BC0PA521
Tencent	Win32.Trojan.Falsesign.Swbc
Fortinet	W32/GenKryptik.DPIE!tr
Webroot	W32.Trojan.Gen
AVG	Win32:Malware-gen
CrowdStrike	win/malicious_confidence_100% (W)
Qihoo-360	Win32/Trojan.Ransom.ed7