jaffacakes118_Virus[.]Win32[.]Virut[.]ce[.]52727b5f24a059db03ccfa54436ea644

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Virut.ce.52727b5f24a059db03ccfa54436ea644
Size 111KB
Sample261012-1blmta1va1
SHA256 5133b65d0a96869967fe2f96e94e407c629d01d46095b5536b473f427ec08d90
MD5 52727b5f24a059db03ccfa54436ea644
SHA1 cc0660360cb93ab26b6e291a8961f6289db36175
SHA512 4227d883058ce82f91dbbec76d013799727f4aa5e818310f25f4cfb6e23a538414a88d45bf9bc314b2a2f7e77b85fb0057bd851ac016c1feac740bb1fa44f4f0
SSDEEP 1536:eufJG5bVxZAhEcT1yULhiAJ0CuQUcvhvMbarGeGxJzHcM4:e5bcT8ULR4gBrGeG/rr
TLSH
T19FB36C61F1B4E27AD4EA22B0126C3768D26DE6640F54A7CF53050AEEE9706C09F7438F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.ce.52727b5f24a059db03ccfa54436ea644

File Explorer

jaffacakes118_Virus.Win32.Virut.ce.52727b5f24a059db03ccfa54436ea644

.exe 111KB

jaffacakes118_Virus.Win32.Virut.ce.52727b5f24a059db03ccfa54436ea644

IMPHASH 67cbad80770a6a6cb9cdbaa0599d2663
SHA256 5133b65d0a96869967fe2f96e94e407c629d01d46095b5536b473f427ec08d90
MD5 52727b5f24a059db03ccfa54436ea644
SHA1 cc0660360cb93ab26b6e291a8961f6289db36175
SHA512 4227d883058ce82f91dbbec76d013799727f4aa5e818310f25f4cfb6e23a538414a88d45bf9bc314b2a2f7e77b85fb0057bd851ac016c1feac740bb1fa44f4f0
SSDEEP 1536:eufJG5bVxZAhEcT1yULhiAJ0CuQUcvhvMbarGeGxJzHcM4:e5bcT8ULR4gBrGeG/rr
TLSH
T19FB36C61F1B4E27AD4EA22B0126C3768D26DE6640F54A7CF53050AEEE9706C09F7438F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

121110

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

DeviceDisplayObjectProvider.pdb

advapi32

TraceMessage GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle RegisterTraceGuidsW UnregisterTraceGuids EventRegister EventUnregister RegDeleteKeyValueW RegGetValueW RegSetKeyValueW RegCloseKey RegEnumKeyExW RegOpenKeyExW RegEnumValueW EventWrite

kernel32

GlobalAlloc AcquireSRWLockShared ReleaseSRWLockShared GetComputerNameExW SetThreadpoolTimer CloseThreadpoolTimer WaitForThreadpoolTimerCallbacks CloseThreadpoolWork WaitForThreadpoolWorkCallbacks ResetEvent SubmitThreadpoolWork CreateThreadpoolWork GlobalFree ReadFile WriteFile SetFilePointerEx GetFileSizeEx WaitForSingleObject GetCurrentProcess CreateFileW InterlockedIncrement InterlockedDecrement SetEvent CloseHandle ReleaseSRWLockExclusive AcquireSRWLockExclusive InitializeSRWLock DuplicateHandle GetTickCount CreateEventW CreateThreadpoolTimer GetLastError InterlockedExchange MultiByteToWideChar GetSystemFirmwareTable UnhandledExceptionFilter TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId QueryPerformanceCounter Sleep GetModuleHandleA SetUnhandledExceptionFilter GetStartupInfoA InterlockedCompareExchange

user32

GetDisplayConfigBufferSizes DisplayConfigGetDeviceInfo QueryDisplayConfig

msvcrt

__set_app_type free _purecall malloc memset qsort _wcsnicmp wcsstr _wcsicmp _vsnwprintf __RTDynamicCast wcschr memcpy _callnewh __getmainargs _cexit _controlfp _except_handler4_common ?terminate@@YAXXZ ??1type_info@@UAE@XZ _ismbblead __p__fmode __p__commode __setusermatherr _amsg_exit _initterm _acmdln exit _XcptFilter _exit

ole32

CoAddRefServerProcess CoReleaseServerProcess CoUninitialize CLSIDFromString IIDFromString StringFromIID StringFromGUID2 CoTaskMemFree CoTaskMemAlloc PropVariantClear CreateStreamOnHGlobal CoCreateInstance CoInitializeEx CoRegisterClassObject CoRevokeClassObject

devobj

DevObjGetDeviceProperty DevObjOpenDeviceInfo DevObjCreateDeviceInfoList DevObjDestroyDeviceInfoList

propsys

PSPropertyKeyFromString

dmrc

DMrcQueryModelId DMrcGetProperties DMrcQueryClose DMrcInit DMrcExit DMrcQueryHardwareId

xmllite

CreateXmlReader

bcrypt

BCryptDestroyHash BCryptCloseAlgorithmProvider BCryptOpenAlgorithmProvider BCryptFinishHash BCryptGetProperty BCryptCreateHash BCryptHashData