jaffacakes118_Trojan-Spy[.]Win32[.]Ursnif[.]ven[.]c4268cc5c3c278090cd0dafd6b8c3b46

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.Ursnif.ven.c4268cc5c3c278090cd0dafd6b8c3b46
Size 463KB
Sample261018-26lrqsda48
SHA256 1926523269170c46dbaa532117da153979c99f857aedfefcc50afafe5b14390a
MD5 c4268cc5c3c278090cd0dafd6b8c3b46
SHA1 4e056cdc6cc9780b5cfeddfd52594415e2878b2f
SHA512 2a801a52fbde690136c30c687a70cab61c698fd6fc284f968463779c5496fb8078f59dc245ec4e9ce11fee5f4a2291beec944830501f9790f6a67e0eb52eab67
SSDEEP 6144:MQkKleDZYmhFvRoq/PWtM3IELZlRWlZ1Ev7ZB1IFOlNXtxA4ThlTVerzBFztxUVz:dkKlWZYmz1GYZlMlAdzIKRvo3BJkXeE
TLSH
T1DFA4E022B59084B7E12619B05CD59BE18A38FE761B1089CFBB972B3A1F333D0DE51716
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Ursnif.ven.c4268cc5c3c278090cd0dafd6b8c3b46

File Explorer

jaffacakes118_Trojan-Spy.Win32.Ursnif.ven.c4268cc5c3c278090cd0dafd6b8c3b46

.exe 463KB

jaffacakes118_Trojan-Spy.Win32.Ursnif.ven.c4268cc5c3c278090cd0dafd6b8c3b46

IMPHASH 26675b34c91992eef7e3d4f9a864cf32
SHA256 1926523269170c46dbaa532117da153979c99f857aedfefcc50afafe5b14390a
MD5 c4268cc5c3c278090cd0dafd6b8c3b46
SHA1 4e056cdc6cc9780b5cfeddfd52594415e2878b2f
SHA512 2a801a52fbde690136c30c687a70cab61c698fd6fc284f968463779c5496fb8078f59dc245ec4e9ce11fee5f4a2291beec944830501f9790f6a67e0eb52eab67
SSDEEP 6144:MQkKleDZYmhFvRoq/PWtM3IELZlRWlZ1Ev7ZB1IFOlNXtxA4ThlTVerzBFztxUVz:dkKlWZYmz1GYZlMlAdzIKRvo3BJkXeE
TLSH
T1DFA4E022B59084B7E12619B05CD59BE18A38FE761B1089CFBB972B3A1F333D0DE51716
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

27228

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

C:\unfficial\subculture\m.pdb

kernel32

SetFilePointer WriteConsoleW HeapSize RtlUnwind FlushFileBuffers GetConsoleMode GetConsoleCP LoadLibraryW SetStdHandle HeapReAlloc LCMapStringW GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount QueryPerformanceCounter GetSystemTime CloseHandle GetFileTime CreatePipe GetSystemInfo SetLastError GetLastError HeapCreate GetFileAttributesA GetVolumeInformationA HeapAlloc SetHandleInformation OpenFile GetEnvironmentStringsW WideCharToMultiByte FreeEnvironmentStringsW GetModuleFileNameA GetModuleFileNameW WriteFile GetStringTypeW IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetLocaleInfoW GetUserDefaultLCID ExitProcess Sleep DeleteCriticalSection GetFileType InitializeCriticalSectionAndSpinCount GetStdHandle SetHandleCount IsProcessorFeaturePresent HeapFree GetProcAddress GetCurrentThreadId CreateFileW GetModuleHandleW TlsFree DecodePointer MultiByteToWideChar EnterCriticalSection LeaveCriticalSection InterlockedDecrement InterlockedIncrement GetCommandLineA HeapSetInformation GetStartupInfoW RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo GetACP GetOEMCP IsValidCodePage EncodePointer TlsAlloc TlsGetValue TlsSetValue

user32

CreateWindowExA MessageBoxA SetWindowLongA CheckMenuRadioItem MapVirtualKeyA MapWindowPoints SetClipboardData GetMenu IsDlgButtonChecked GetDC GetMonitorInfoA OpenClipboard SystemParametersInfoA EmptyClipboard CloseClipboard FillRect OpenInputDesktop SendMessageA

gdi32

CreateHatchBrush SetDIBColorTable ExcludeClipRect DeleteObject SelectObject DPtoLP Rectangle CreatePen RoundRect GetStockObject EnumFontsA GdiTransparentBlt

comdlg32

GetOpenFileNameA

shell32

SHOpenFolderAndSelectItems SHGetPathFromIDListA

ole32

StgOpenStorage

odbc32

ord266 ord265

netapi32

NetWkstaGetInfo

winmm

mmioAscend

version

GetFileVersionInfoSizeA

pdh

PdhAddCounterW

rpcrt4

UuidToStringW UuidCreate

uxtheme

OpenThemeData SetWindowTheme

urlmon

ObtainUserAgentString

wlanapi

WlanOpenHandle