Categories: Trojan

BScope.TrojanPSW.Gamania (file analysis)

The BScope.TrojanPSW.Gamania is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What BScope.TrojanPSW.Gamania virus can do?

Executable code extraction
Creates RWX memory
A process attempted to delay the analysis task.
Drops a binary and executes it
The binary likely contains encrypted or compressed data.
The executable is compressed using UPX
Attempts to repeatedly call a single API many times in order to delay analysis time
Installs itself for autorun at Windows startup
Creates a hidden or system file

Related domains:

ero.bckl.ir

oip.xioerabn.site

How to determine BScope.TrojanPSW.Gamania?


File Info:
crc32: A808F935md5: ac4c9c3934102bfdc3bfac36420272a8name: download.exesha1: 43de36ce3206ac7caa78fefdc570d5f6cbd82fccsha256: f16f5e83033d86c56e255c3e4345209a1b5bd21a4f5709e64dfdeb87b95ec7d1sha512: b1b829ceebbdf470936bcc282f2c8bbdd582fbc9c24182565dacad3eab813ecbc1f2a0afb43057113a30d9d99bc3660e484a65e32d89fd03696aeb072a9f4f64ssdeep: 3072:0JiwCMPWedDMeUMnhV85HtoAwmJHDz6U:yiwHWedIeUMhVaNN1type: PE32 executable (GUI) Intel 80386, for MS Windows, UPX compressed
Version Info:
0: [No Data]

BScope.TrojanPSW.Gamania also known as:

MicroWorld-eScan	Trojan.GenericKD.33395570
FireEye	Generic.mg.ac4c9c3934102bfd
CAT-QuickHeal	Trojan.MauvaiseRI.S5247825
Qihoo-360	Generic/HEUR/QVM11.1.887D.Malware.Gen
McAfee	RDN/Generic.tfr
Cylance	Unsafe
AegisLab	Trojan.Win32.Miancha.4!c
Sangfor	Malware
K7AntiVirus	Adware ( 005070c51 )
BitDefender	Trojan.GenericKD.33395570
K7GW	Adware ( 005070c51 )
CrowdStrike	win/malicious_confidence_60% (W)
TrendMicro	Backdoor.Win32.ZEGOST.SMS
Symantec	ML.Attribute.HighConfidence
APEX	Malicious
ClamAV	Win.Dropper.Gh0stRAT-6989861-0
GData	Win32.Malware.Coinminer.F6XZ8P
Kaspersky	Trojan.Win32.Miancha.iua
Alibaba	Trojan:Win32/Miancha.2b6f2556
NANO-Antivirus	Trojan.Win32.Miancha.hcqvge
Tencent	Win32.Trojan.Miancha.Lnoe
Ad-Aware	Trojan.GenericKD.33395570
Emsisoft	Trojan.GenericKD.33395570 (B)
Comodo	Packed.Win32.MUPX.Gen@24tbus
F-Secure	Trojan.TR/ATRAPS.Gen
DrWeb	Trojan.DownLoader25.10311
Invincea	heuristic
McAfee-GW-Edition	BehavesLike.Win32.Ipamor.cc
Trapmine	malicious.high.ml.score
Sophos	Troj/Kryptik-JA
Ikarus	Trojan.Win32.Injector
Cyren	W32/Trojan.ECVK-3350
Avira	TR/ATRAPS.Gen
Endgame	malicious (moderate confidence)
Arcabit	Trojan.Generic.D1FD9372
ZoneAlarm	Trojan.Win32.Miancha.iua
Microsoft	Trojan:Win32/Occamy.C
BitDefenderTheta	Gen:NN.ZexaF.34096.imGfaS!lC7f
ALYac	Trojan.GenericKD.33395570
MAX	malware (ai score=87)
VBA32	BScope.TrojanPSW.Gamania
Panda	Trj/CI.A
ESET-NOD32	a variant of Win32/Packed.BlackMoon.A potentially unwanted
TrendMicro-HouseCall	Backdoor.Win32.ZEGOST.SMS
Rising	Trojan.Farfli!8.FF (CLOUD)
Yandex	Riskware.BlackMoon!
SentinelOne	DFI – Suspicious PE
eGambit	Unsafe.AI_Score_100%
Fortinet	Riskware/Miancha
AVG	Win32:Malware-gen
Cybereason	malicious.e3206a
Avast	Win32:Malware-gen
MaxSecure	Trojan.Malware.75060590.susgen