home

B2CAppSetup.EXE

B2CAppSetup LGMobile Application

LG Electronics

The executable B2CAppSetup.EXE has been detected as malware by 9 anti-virus scanners. This is a setup and installation application, however the file is not signed with an authenticode signature from a trusted source. Infected by the Parite virus, a polymorphic file infecting virus that infects all portable EXE and SCR files found on local and shared network drives. The file has been seen being downloaded from click.xda-developers.com.
Publisher:
LG Electronics

Product:
B2CAppSetup LGMobile Application

Version:
1, 0, 2, 4

MD5:
4564e405ded3051532f0abf4757a2fc8

SHA-1:
8e8da53265a4e46bbd1ecd8721cdd6db37f3d2ca

SHA-256:
8b9dd58d3406235b90dbc2157e9ad108a4130e20cf4c1b480957be8d2bce6e65

Scanner detections:
9 / 68

Status:
File is infected by a Virus

Explanation:
The file is infected by a polymorphic file infector virus.

Analysis date:
12/24/2024 4:05:20 PM UTC  (today)

Scan engine
Detection
Engine version

avast!
Win32:Parite
160503-1

Dr.Web
Win32.Parite.2
9.0.1.05190

ESET NOD32
Win32/Parite.B virus
7.0.302.0

F-Prot
W32/Parite.B
4.6.5.141

F-Secure
Win32.Parite.B
5.15.21

Kaspersky
Virus.Win32.Parite
15.0.0.562

McAfee
Virus.W32/Pate.b
18.0.204.0

Microsoft Security Essentials
Threat.Undefined
1.223.2949.0

Norman
Win32.Parite.B
28.05.2016 15:32:18

File size:
429.5 KB (439,774 bytes)

Product version:
1, 0, 2, 4

Copyright:
Copyright (C) 2011 LG Electronics

Original file name:
B2CAppSetup.EXE

File type:
Executable application (Win32 EXE)

Language:
Korean (Korea)

Common path:
C:\users\{user}\downloads\b2cappsetup.exe

File PE Metadata
Compilation timestamp:
1/2/2012 6:37:14 PM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
6.0

CTPH (ssdeep):
6144:a9BstCRdhD16YLuX/HhKbT9j/oBsN3jYSOSpkkwQjZ5W0fMtl6OOwf1y:a3stCRLEYLaKbp/LNzNOGkknj2wwGwfc

Entry address:
0x43000

Entry point:
90, 68, 79, 0E, 89, 01, 5B, BA, 24, 30, 44, 00, 90, 90, 68, 98, 05, 00, 00, 5E, FF, 34, 32, 31, 1C, 24, 8F, 04, 32, 90, 90, 83, EE, 04, 90, 90, 75, EE, 90, 90, 91, 73, 88, 01, 79, 0E, 89, 01, 79, 0E, C9, 01, 3D, D2, 89, 01, 21, F2, 8A, 01, A7, 0B, 8D, 01, 79, BE, 8B, 01, 78, 0E, 89, 01, BD, CE, CB, 01, 33, 50, CA, 01, 23, 50, CA, 01, D9, 5F, 8A, 01, 31, 50, 8A, 01, 21, 50, 8A, 01, BD, CE, 8B, 01, 31, 50, 8A, 01, 21, 50, 8A, 01, 79, 0E, 89, 01, 79, 0E, 89, 01, 79, 0E, 89, 01, 79, 0E, 89, 01, BD, CC, CB, 01...
 
[+]

Entropy:
7.2168

Code size:
172 KB (176,128 bytes)

The file B2CAppSetup.EXE has been seen being distributed by the following URL.

http://click.xda-developers.com/api/click?format=go&jsonp=vglnk_144972584355315&key=f0a7f91912ae2b52e0700f73990eb321&libId=ihzn2x3p01000n4o000DAbd1rill1&loc=http://forum.xda-developers.com/showthread.php?t=2622777&v=1&out=http://.../client/app/B2CAppSetup.exe&ref=https://www.google.com/&title=[GUIDE] [V500] Install Stock ROM (KDZ) LG G … | LG G Pad 8.3&txt=http://.../client...2CAppSetup.exe

Remove B2CAppSetup.EXE - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.