home

{trojan.msil.injector}{trojan.trojan.win32.generic!bt}{heuristics.shuriken}{trojan.downloader17.6

QQWnzcgr

bzmom

The file {trojan.msil.injector}{trojan.trojan.win32.generic!bt}{heuristics.shuriken}{trojan.downloader17.6 has been detected as malware by 31 anti-virus scanners.
Publisher:
bzmom

Product:
QQWnzcgr

Version:
4.4.604.636

MD5:
0097f4c35538094c85da25df3fdfd59a

SHA-1:
2749e2eee0b59c836e4e4c596cc675f8da704b11

SHA-256:
73ba241ccca7ef4a8f03619818b0186c40e1105775369c9db473900bd7872df4

Scanner detections:
31 / 68

Status:
Malware

Analysis date:
4/26/2024 2:28:57 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.2898067
371

Agnitum Outpost
Trojan.Agent
7.1.1

Avira AntiVirus
TR/Dropper.MSIL.229814
8.3.2.4

Arcabit
Trojan.Generic.D2C3893
1.0.0.629

avast!
Win32:Malware-gen
2014.9-160130

AVG
MSIL9
2017.0.2849

Baidu Antivirus
Trojan.MSIL.Injector
4.0.3.16130

Bitdefender
Trojan.GenericKD.2898067
1.0.20.150

Comodo Security
UnclassifiedMalware
23785

Dr.Web
Trojan.DownLoader17.62154
9.0.1.030

Emsisoft Anti-Malware
Trojan.GenericKD.2898067
8.16.01.30.05

ESET NOD32
MSIL/Injector.MUE (variant)
10.12738

Fortinet FortiGate
MSIL/Injector.MUE!tr
1/30/2016

F-Prot
W32/Trojan2.OXSY
v6.4.7.1.166

F-Secure
Trojan.GenericKD.2898067
11.2016-30-01_7

G Data
Trojan.GenericKD.2898067
16.1.25

IKARUS anti.virus
Trojan.MSIL.Injector
t3scan.1.9.5.0

K7 AntiVirus
Riskware
13.212.18131

Kaspersky
Trojan.MSIL.Agent
14.0.0.739

McAfee
RDN/Generic.grp
5600.6505

Microsoft Security Essentials
VirTool:MSIL/Injector.HL
1.1.12400.0

MicroWorld eScan
Trojan.GenericKD.2898067
17.0.0.90

NANO AntiVirus
Trojan.Win32.DownLoader17.dyyazg
1.0.10.5081

nProtect
Trojan.GenericKD.2898067
15.12.17.01

Panda Antivirus
Trj/GdSda.A
16.01.30.05

Sophos
Mal/MSIL-PL
4.98

Trend Micro House Call
TROJ_VIRTOOL.TFEC07
7.2.30

Trend Micro
TROJ_VIRTOOL.TFEC07
10.465.30

VIPRE Antivirus
Trojan.Win32.Generic
45902

ViRobot
Trojan.Win32.Z.Injector.364544.O[h]
2014.3.20.0

Zillya! Antivirus
Trojan.Injector.Win32.339506
2.0.0.2569

File size:
356 KB (364,544 bytes)

Product version:
4.4.604.636

Copyright:
Copyright (C) 2008-2012 mQxuJn TJYDwstukiwE

Original file name:
wchppIc.exe

File PE Metadata
Compilation timestamp:
11/26/2015 4:36:33 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:fyTtJUjVxUHoaBeuLK+HDtSW2YWEgWCkFehc7EeP2aPy2:f6IVxUhLPtSW7WEJdwhc7EuT

Entry address:
0x56A03

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Entropy:
7.8060

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
340 KB (348,160 bytes)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.