jaffacakes118_Virus[.]Win32[.]Virut[.]ce[.]445c2ffa61bd274010e346ed12990a42

General

Target
jaffacakes118_Virus.Win32.Virut.ce.445c2ffa61bd274010e346ed12990a42
Size 52KB
Sample261012-1be52a1vay
SHA256 a407b00f26e808a6088ca551929706f30bca4cb7dbcd1cbd89b41e968b745cc9
MD5 445c2ffa61bd274010e346ed12990a42
SHA1 d568fd6e6ff3aad01ced3b9413771d66d916397a
SHA512 d4761c4d35ead173b938967c776018cf3abe4adee5d83b67ba7cae3ceee72c9c6f4977164e6c9fc32f1f33b08b862989ec2ca32d1d4ed71dea6a34d3e0658d13
SSDEEP 1536:mO5vBmEBAQmRecw8QEvqYM80/BsYwNhS:d5vHAQJBsXNh
TLSH
T1E733D71925B30337EC97187041781FA16FFE9DB7767252EFCA0016A558AF3C05EA0BA6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.ce.445c2ffa61bd274010e346ed12990a42

File Explorer

jaffacakes118_Virus.Win32.Virut.ce.445c2ffa61bd274010e346ed12990a42

.exe 52KB

jaffacakes118_Virus.Win32.Virut.ce.445c2ffa61bd274010e346ed12990a42

IMPHASH e889813ca79459fad2b3700f087aa4ee
SHA256 a407b00f26e808a6088ca551929706f30bca4cb7dbcd1cbd89b41e968b745cc9
MD5 445c2ffa61bd274010e346ed12990a42
SHA1 d568fd6e6ff3aad01ced3b9413771d66d916397a
SHA512 d4761c4d35ead173b938967c776018cf3abe4adee5d83b67ba7cae3ceee72c9c6f4977164e6c9fc32f1f33b08b862989ec2ca32d1d4ed71dea6a34d3e0658d13
SSDEEP 1536:mO5vBmEBAQmRecw8QEvqYM80/BsYwNhS:d5vHAQJBsXNh
TLSH
T1E733D71925B30337EC97187041781FA16FFE9DB7767252EFCA0016A558AF3C05EA0BA6
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

10098

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

setupn.pdb

msvcrt

??2@YAPAXI@Z ??3@YAXPAX@Z _wcsicmp wcsstr mbstowcs _c_exit _exit _XcptFilter _cexit exit _acmdln __getmainargs _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm wcslen

advapi32

RegQueryValueExW RegQueryValueExA RegSetValueExW RegSetValueExA RegOpenKeyExW RegOpenKeyExA RegDeleteValueW RegCloseKey RegDeleteValueA RegCreateKeyExW RegCreateKeyExA

kernel32

GetShortPathNameW GetShortPathNameA GetVersionExW SetFileAttributesW SetFileAttributesA GetFileAttributesW GetFileAttributesA GetCurrentDirectoryW GetCurrentDirectoryA GetStartupInfoA GetModuleHandleA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter FindClose SetCurrentDirectoryA SetCurrentDirectoryW WideCharToMultiByte MultiByteToWideChar GetVersionExA lstrlenW GetLastError GetProcAddress FindFirstFileA FindFirstFileW FindNextFileA FindNextFileW

ole32

CoInitialize CoCreateInstance CoUninitialize

shell32

SHGetPathFromIDListA SHChangeNotify SHGetSpecialFolderLocation SHGetMalloc

shlwapi

PathRemoveBlanksW

user32

LoadStringA LoadStringW RegisterWindowMessageA SendMessageA

Sharing