jaffacakes118_Trojan-Spy[.]Win32[.]Ursnif[.]yhl[.]59efd009a993e2e1011cedab876039b1

General

Target
jaffacakes118_Trojan-Spy.Win32.Ursnif.yhl.59efd009a993e2e1011cedab876039b1
Size 429KB
Sample261018-267zzaat2q
SHA256 141cb223a3af9149b880b23071743901f319e56384cf9f8f87eb1b749723b55c
MD5 59efd009a993e2e1011cedab876039b1
SHA1 66dedbbc7c259a7cc8359accb2ead659cf8d8f32
SHA512 24f7f1675b8ccb6008533b4735c32e6f13de1618c354a1b3383b8357c3b7d4c03f68ced047180d9507d45c55c34c83c301af9c068610733365a1b7ab03a1f8a7
SSDEEP 6144:G3moIphZth7w7VZpAOJEebvnvq5p8SyVK31e3UNI8nnW5KYrSPOtOo1iQVm:GEMVZpFbvvo8fVokInopSmrjm
TLSH
T1CE94D020B4D2C432D572057008FBEA75952EFC754F269AFB27D91F794FB81C0A632A62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Ursnif.yhl.59efd009a993e2e1011cedab876039b1

File Explorer

jaffacakes118_Trojan-Spy.Win32.Ursnif.yhl.59efd009a993e2e1011cedab876039b1

.exe 429KB

jaffacakes118_Trojan-Spy.Win32.Ursnif.yhl.59efd009a993e2e1011cedab876039b1

IMPHASH 2d785cafc938a700fa76576976bad2ed
SHA256 141cb223a3af9149b880b23071743901f319e56384cf9f8f87eb1b749723b55c
MD5 59efd009a993e2e1011cedab876039b1
SHA1 66dedbbc7c259a7cc8359accb2ead659cf8d8f32
SHA512 24f7f1675b8ccb6008533b4735c32e6f13de1618c354a1b3383b8357c3b7d4c03f68ced047180d9507d45c55c34c83c301af9c068610733365a1b7ab03a1f8a7
SSDEEP 6144:G3moIphZth7w7VZpAOJEebvnvq5p8SyVK31e3UNI8nnW5KYrSPOtOo1iQVm:GEMVZpFbvvo8fVokInopSmrjm
TLSH
T1CE94D020B4D2C432D572057008FBEA75952EFC754F269AFB27D91F794FB81C0A632A62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

24338

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\Users\ДНС\source\repos\Project21\Release\Project21.pdb

kernel32

ReadConsoleW SetStdHandle HeapSize SetEnvironmentVariableA FreeEnvironmentStringsW CreateFileW ExitProcess GetProcAddress GetModuleHandleA TerminateProcess GetEnvironmentStringsW GetOEMCP IsValidCodePage GetLastError WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection SetLastError InitializeCriticalSectionAndSpinCount CreateEventW Sleep TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW EncodePointer DecodePointer MultiByteToWideChar CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead GetCurrentProcess RtlUnwind RaiseException FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree GetStdHandle WriteFile GetModuleFileNameA GetModuleHandleExW GetCommandLineA GetCommandLineW GetACP IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx GetProcessHeap FindClose FindFirstFileExA FindNextFileA WriteConsoleW

user32

ReleaseDC GetDesktopWindow GetWindowDC GetDC GetSystemMetrics

gdi32

CreateCompatibleDC DeleteDC CreatePen MoveToEx CreateCompatibleBitmap

gdiplus

GdipDeletePen GdiplusStartup GdipCreatePen1

Sharing