jaffacakes118_Trojan-Spy[.]Win32[.]Ursnif[.]zfx[.]5eb5a460b9a8ce8c00b54e53e14eec78

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Spy.Win32.Ursnif.zfx.5eb5a460b9a8ce8c00b54e53e14eec78
Size 1.3MB
Sample261018-27fl4sda49
SHA256 842d0d6b39d0f44abdae5ed229daf5b371145dea43f9a706e2711e6a412bbcf2
MD5 5eb5a460b9a8ce8c00b54e53e14eec78
SHA1 54062fee206d572a7605225bede71f1ff6e3e1fc
SHA512 76c753d51388e40167fa5eaee76791e056b96a522b15c2d646012f217dd77639d534f895dca99af880d8a269ab34c059abc901ed016ff70a7f1a54b51104735d
SSDEEP 24576:teGxCNuJhikzz4SqVn3a5Icic8xntngV0bsDTC:teGP8nqLSbsDT
TLSH
T18E55E002BF42D475C4B10D7289E8C399C234FE845E7207A773E779AE4DB52C6ED2A246
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Spy.Win32.Ursnif.zfx.5eb5a460b9a8ce8c00b54e53e14eec78

File Explorer

jaffacakes118_Trojan-Spy.Win32.Ursnif.zfx.5eb5a460b9a8ce8c00b54e53e14eec78

.exe 1.3MB

jaffacakes118_Trojan-Spy.Win32.Ursnif.zfx.5eb5a460b9a8ce8c00b54e53e14eec78

IMPHASH ddb7c9303f60104aa8f513662fbb5f92
SHA256 842d0d6b39d0f44abdae5ed229daf5b371145dea43f9a706e2711e6a412bbcf2
MD5 5eb5a460b9a8ce8c00b54e53e14eec78
SHA1 54062fee206d572a7605225bede71f1ff6e3e1fc
SHA512 76c753d51388e40167fa5eaee76791e056b96a522b15c2d646012f217dd77639d534f895dca99af880d8a269ab34c059abc901ed016ff70a7f1a54b51104735d
SSDEEP 24576:teGxCNuJhikzz4SqVn3a5Icic8xntngV0bsDTC:teGP8nqLSbsDT
TLSH
T18E55E002BF42D475C4B10D7289E8C399C234FE845E7207A773E779AE4DB52C6ED2A246
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

748777

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\market\Give\fig\sentence\Meet\add\Morning\final\fromFire.pdb

kernel32

GlobalAddAtomA GetLocaleInfoA GetCPInfo GetOEMCP WriteFile SetFilePointer FlushFileBuffers RtlUnwind GlobalFindAtomA VirtualAlloc HeapAlloc HeapFree HeapReAlloc GetCommandLineA GetProcessHeap RaiseException HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent VirtualFree HeapDestroy HeapCreate GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetHandleCount GetFileType GetSystemTimeAsFileTime GetACP GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW GlobalDeleteAtom lstrcmpW GetCurrentThreadId GetThreadLocale GlobalGetAtomNameA GlobalFlags lstrcmpA TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc GetCurrentProcessId GetModuleFileNameA FreeLibrary InterlockedDecrement InterlockedIncrement SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree LockResource SizeofResource WaitForSingleObject GetTempPathA OpenMutexA LoadLibraryExA GetProcAddress LoadLibraryA Sleep GetCurrentProcess LoadResource FindResourceA GetDateFormatA GetModuleHandleA GetVersionExA OpenProcess GetSystemTime GetVolumeInformationA CreateFileA QueryPerformanceCounter GetTickCount DeleteFileA GetLastError GetStartupInfoA CloseHandle CreateProcessA lstrlenA WideCharToMultiByte CompareStringA MultiByteToWideChar InterlockedExchange GetVersion

user32

GrayStringA DrawTextExA DrawTextA TabbedTextOutA RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA GetForegroundWindow GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu PostMessageA CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA SystemParametersInfoA IsIconic GetWindowPlacement SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA ModifyMenuA EnableMenuItem CheckMenuItem SetWindowPos SetWindowLongA IsWindow GetDlgItem SetWindowsHookExA CallNextHookEx DispatchMessageA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetSysColorBrush GetSysColor ReleaseDC GetDC GetSystemMetrics LoadCursorA UnhookWindowsHookEx MessageBoxA PostQuitMessage DestroyMenu GetKeyState PeekMessageA ValidateRect UnregisterClassA GetFocus ClientToScreen GetWindow GetDlgCtrlID GetWindowRect GetClassNameA PtInRect GetWindowTextA SetWindowTextA GetWindowThreadProcessId SendMessageA GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow

ole32

CoInitialize CoRegisterSurrogate CoRegisterClassObject CoUninitialize OleUninitialize OleInitialize

oleaut32

VariantClear VariantChangeType VariantInit

gdi32

DeleteDC TextOutA GetStockObject DeleteObject CreateBitmap GetClipBox SetTextColor SetBkColor SaveDC RestoreDC ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape GetDeviceCaps RectVisible PtVisible SetMapMode ExtTextOutA

winspool.drv

DocumentPropertiesA OpenPrinterA ClosePrinter

oleacc

LresultFromObject CreateStdAccessibleObject