SecuriteInfo[.]com[.]BScope[.]TrojanPSW[.]Fareit[.]1638[.]2190[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SecuriteInfo.com.BScope.TrojanPSW.Fareit.1638.2190.exe
Size

715KB
MD5

da7a5186ce7877bf03324e47417be615
SHA1

b821c7349bb3b4a71c79247a10fd82a11ed836b5
SHA256

b8a56e99f38472330e1cef9b23e707ed2ee45cb4981a316cfd433dd64e840681
SHA512

8d61f8499ac35d19ff2691455e31be7bbf781cf9576265a40c952d922d738740c3ec3410b40c2072b00e100bfc30b82498b7e5c5424427272a2bde570b337bd5
SSDEEP

12288:FJaHrwjbT1E8Fuc6oqLhAFlQdWHnr8IcLwhQKCQk2XOWiF5frPay:F0rw/CST6oqd4lQUHr0LTzx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SecuriteInfo.com.BScope.TrojanPSW.Fareit.1638.2190.exe

Files

SecuriteInfo.com.BScope.TrojanPSW.Fareit.1638.2190.exe
.exe windows:4 windows x86 arch:x86

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

lstrcatA
InitializeCriticalSection
GetProcAddress
LocalFree
RaiseException
LocalAlloc
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
DuplicateHandle
GetShortPathNameA
ResumeThread
WriteProcessMemory
GetPrivateProfileSectionA
GetStringTypeA
LCMapStringW
LCMapStringA
RtlUnwind
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW

user32

DefWindowProcA
AdjustWindowRectEx

Sections

0
Size: 420KB - Virtual size: 856KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

1
Size: 88KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

3
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

4
Size: 3KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

5
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

6
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

7
Size: 140KB - Virtual size: 140KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

8
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

9
Size: 46KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

10
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

11
Size: 7KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

73ec795c6c369c6ce2c3b4c3f6477daa

Headers

File Characteristics

Imports

kernel32

user32

Sections

0 Size: 420KB - Virtual size: 856KB

1 Size: 88KB - Virtual size: 108KB

2 Size: 512B - Virtual size: 4KB

3 Size: 512B - Virtual size: 4KB

4 Size: 3KB - Virtual size: 12KB

5 Size: 512B - Virtual size: 4KB

6 Size: 512B - Virtual size: 4KB

7 Size: 140KB - Virtual size: 140KB

8 Size: - Virtual size: 56KB

9 Size: 46KB - Virtual size: 71KB

10 Size: 3KB - Virtual size: 3KB

11 Size: 7KB - Virtual size: 28KB

0
Size: 420KB - Virtual size: 856KB

1
Size: 88KB - Virtual size: 108KB

2
Size: 512B - Virtual size: 4KB

3
Size: 512B - Virtual size: 4KB

4
Size: 3KB - Virtual size: 12KB

5
Size: 512B - Virtual size: 4KB

6
Size: 512B - Virtual size: 4KB

7
Size: 140KB - Virtual size: 140KB

8
Size: - Virtual size: 56KB

9
Size: 46KB - Virtual size: 71KB

10
Size: 3KB - Virtual size: 3KB

11
Size: 7KB - Virtual size: 28KB