Categories: SpyTrojan

TrojanSpy:Win32/Banker.VAY information

The TrojanSpy:Win32/Banker.VAY is considered dangerous by lots of security experts. When this infection is active, you may notice unwanted processes in Task Manager list. In this case, it is adviced to scan your computer with GridinSoft Anti-Malware.

Gridinsoft Anti-Malware

Removing PC viruses manually may take hours and may damage your PC in the process. We recommend using GridinSoft Anti-Malware for virus removal. Allows to complete scan and cure your PC during the trial period.

DOWNLOAD NOW

6-day free trial available.

What TrojanSpy:Win32/Banker.VAY virus can do?

Unconventionial binary language: Portuguese (Brazil)
Unconventionial language used in binary resources: Portuguese (Brazilian)
The binary contains an unknown PE section name indicative of packing
Authenticode signature is invalid
Operates on local firewall’s policies and settings

How to determine TrojanSpy:Win32/Banker.VAY?


File Info:
name: 07647671054982A7DCDF.mlwpath: /opt/CAPEv2/storage/binaries/04128636d38ddbe2da90a1b5fb90017fe1c29f9802a6187bc59403fa9f16a3cdcrc32: 43662A18md5: 07647671054982a7dcdf092d81d5ef51sha1: 0ec47d65b2677f7dd9d9be7bdb6b59519a8d7dd9sha256: 04128636d38ddbe2da90a1b5fb90017fe1c29f9802a6187bc59403fa9f16a3cdsha512: 0185424819aae5f98ac506bbb5fb60715d2d0c9689629d1e6427d464452fa5d729f9832c8b45855449b956da5c0d053ea12fd94659d1a39af216806d79adf385ssdeep: 12288:FrwERjUBtlaPER1vW/+dVgI+2vnAnTWlbcVQB1cumbsGgT3Su9tFg5wY7O49x4id:F7RjQ6ERhWUqHWcVm44GgjnS2i5Htype: PE32 executable (GUI) Intel 80386, for MS Windowstlsh: T11C257E23B2915833C5731A38AD6B576C9929BE003E38A84A3BF51E8C6F357417D353A7sha3_384: cd68e08c216e94d41ad990de988d32cba33f2f839a5d75cbd62f7e2ced39506985821c5c382d48d1b138bb30328f9df2ep_bytes: 558bec83c4f053b804334c00e82335f4timestamp: 1992-06-19 22:22:17
Version Info:
CompanyName: FileDescription: FileVersion: 1.0.1.0InternalName: MensalãoLegalCopyright: LegalTrademarks: OriginalFilename: MensalãoProductName: ProductVersion: 1.0.0.0Comments: Omenagens: Roberto Jeff. Severino, Zé Dirceu,Marcos Valér., Delúbio e LULATranslation: 0x0416 0x04e4

TrojanSpy:Win32/Banker.VAY also known as:

Bkav	W32.AIDetectMalware
Lionic	Trojan.Win32.Banker.7!c
MicroWorld-eScan	Gen:Trojan.Heur.7G0@tXf@5sfGd
Skyhigh	BehavesLike.Win32.PUP.dh
McAfee	Artemis!076476710549
Malwarebytes	Generic.Malware.AI.DDS
VIPRE	Gen:Trojan.Heur.7G0@tXf@5sfGd
K7AntiVirus	Trojan ( 7000000f1 )
Alibaba	TrojanSpy:Win32/Banker.38f5b50e
K7GW	Trojan ( 7000000f1 )
Cybereason	malicious.5b2677
Symantec	Infostealer.Banpaes
ESET-NOD32	a variant of Win32/TrojanDownloader.Dadobra.JG
APEX	Malicious
Cynet	Malicious (score: 99)
Kaspersky	UDS:DangerousObject.Multi.Generic
BitDefender	Gen:Trojan.Heur.7G0@tXf@5sfGd
NANO-Antivirus	Trojan.Win32.Banker.ctfpon
Avast	FileRepMalware [Trj]
Tencent	Win32.Trojan.Dldr.Ozfl
Emsisoft	Gen:Trojan.Heur.7G0@tXf@5sfGd (B)
F-Secure	Trojan.TR/Dldr.Delphi.Gen
DrWeb	Trojan.DownLoader.5343
FireEye	Gen:Trojan.Heur.7G0@tXf@5sfGd
Sophos	Mal/Behav-130
Ikarus	Trojan-Spy.Win32.Banker.atx
GData	Gen:Trojan.Heur.7G0@tXf@5sfGd
Jiangmin	TrojanSpy.Banker.qdr
Webroot	W32.InfoStealer.Banker
Google	Detected
Avira	TR/Dldr.Delphi.Gen
Antiy-AVL	Trojan[Banker]/Win32.Banker
Xcitium	Malware@#3i8llunz60ks9
Arcabit	Trojan.Heur.ED818A
ZoneAlarm	UDS:DangerousObject.Multi.Generic
Microsoft	TrojanSpy:Win32/Banker.VAY
Varist	W32/Downloader.VPSV-1703
BitDefenderTheta	AI:Packer.5985B4141D
ALYac	Gen:Trojan.Heur.7G0@tXf@5sfGd
MAX	malware (ai score=81)
VBA32	suspected of Downloader.Dadobra.5
Cylance	unsafe
Panda	Trj/Banker.FWD
Rising	Trojan.Spy.Banbra.wkp (CLASSIC)
Yandex	Trojan.GenAsa!bDgdUYRIT6s
MaxSecure	Trojan.Malware.300983.susgen
Fortinet	Malware_fam.gw
AVG	FileRepMalware [Trj]
DeepInstinct	MALICIOUS
CrowdStrike	win/malicious_confidence_70% (W)