jaffacakes118_Virus[.]Win32[.]Virut[.]ce[.]3db0a62527ee1baedd4fd67f4ccdfa29

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Virut.ce.3db0a62527ee1baedd4fd67f4ccdfa29
Size 55KB
Sample261012-1a6llaa13m
SHA256 d3bd4af4ee0c7249d8d6aec794acd7135815309a96f3a16620b1c5594bf13ada
MD5 3db0a62527ee1baedd4fd67f4ccdfa29
SHA1 05b3cb70d85c39ac99259305370584421dcad857
SHA512 d3dcea6cfa0607f6edc3e0c0c9df379fa7ba34648495d0fa62d1e70c989945e3d907d902fc502d8e934e38aa7194154907fadb64c867d82da4f2a4af4591ddf0
SSDEEP 1536:9CdLrSWJG6EC5828JxtaRoSw8+1ImgjXNrmzES:cLrSaG6EaX8halpmz
TLSH
T12843BF25BBBC4279DDE61235C669633A25BEF82A0F00E3CF2219239B0D755D098723D7
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.ce.3db0a62527ee1baedd4fd67f4ccdfa29

File Explorer

jaffacakes118_Virus.Win32.Virut.ce.3db0a62527ee1baedd4fd67f4ccdfa29

.exe 55KB

jaffacakes118_Virus.Win32.Virut.ce.3db0a62527ee1baedd4fd67f4ccdfa29

IMPHASH 98042c6782c3bc47c1497e77c0ea1800
SHA256 d3bd4af4ee0c7249d8d6aec794acd7135815309a96f3a16620b1c5594bf13ada
MD5 3db0a62527ee1baedd4fd67f4ccdfa29
SHA1 05b3cb70d85c39ac99259305370584421dcad857
SHA512 d3dcea6cfa0607f6edc3e0c0c9df379fa7ba34648495d0fa62d1e70c989945e3d907d902fc502d8e934e38aa7194154907fadb64c867d82da4f2a4af4591ddf0
SSDEEP 1536:9CdLrSWJG6EC5828JxtaRoSw8+1ImgjXNrmzES:cLrSaG6EaX8halpmz
TLSH
T12843BF25BBBC4279DDE61235C669633A25BEF82A0F00E3CF2219239B0D755D098723D7
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66458

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

WerFaultSecure.pdb

advapi32

TraceMessage GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle RegisterTraceGuidsW UnregisterTraceGuids

kernel32

LoadLibraryExA InterlockedCompareExchange DelayLoadFailureHook WaitForSingleObject CreateThreadpoolWait GetSystemDirectoryW LoadLibraryW GetProcAddress FreeLibrary DeleteCriticalSection WaitForThreadpoolWaitCallbacks CloseThreadpoolWait CloseHandle EnterCriticalSection SetThreadpoolWait LeaveCriticalSection InitializeCriticalSection CompareStringW SetErrorMode InterlockedExchange Sleep SetUnhandledExceptionFilter GetModuleHandleA QueryPerformanceCounter GetTickCount GetCurrentThreadId GetCurrentProcessId GetSystemTimeAsFileTime TerminateProcess UnhandledExceptionFilter Thread32Next Thread32First CreateToolhelp32Snapshot K32GetModuleFileNameExW OpenProcess OpenThread SetThreadPriority GetThreadPriority GetCurrentThread DuplicateHandle GetThreadContext OutputDebugStringA HeapSetInformation GetCurrentProcess SetEnvironmentVariableW GetLastError RegQueryValueExW RegCloseKey RegOpenKeyExW

msvcrt

_wcsicmp _wtoi64 _wtoi _vsnprintf ??2@YAPAXI@Z ??3@YAXPAX@Z _controlfp _except_handler4_common ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode __setusermatherr _amsg_exit _initterm exit _XcptFilter _exit _cexit __wgetmainargs __CxxFrameHandler3 _vsnwprintf memset

ntdll

DbgPrint ShipAssert RtlCompareMemory NtQueryInformationProcess EtwTraceMessage

faultrep

WerpInitiateCrashReporting