jaffacakes118_Virus[.]Win32[.]Virut[.]ce[.]a9ea9638e58c32dfb44e4c3ef10d6cb9

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Virut.ce.a9ea9638e58c32dfb44e4c3ef10d6cb9
Size 1.0MB
Sample261012-1bxp3s1vb1
SHA256 7e47af22f74fd8724c5ff8bc5e0fe418e12cd71be3250162cb80befe048366a2
MD5 a9ea9638e58c32dfb44e4c3ef10d6cb9
SHA1 6d89e339ad85ae584121482182eacc72e3adc832
SHA512 9d16fe923640c8b042713bad053ac25b3ce63850494f0bd7378b1e56a5a2979fe187118fc017714e5278f80ffa45558676c0d4576017ba6a4ae33e46d8bcaa20
SSDEEP 24576:2HY6vlHIP3+sN2C9LpcJm8GBRJrGkancMMMMMMcg:ci3FNTgyHJNMMMMMMx
TLSH
T1A5259C10BBD9C072E8A92E36147A7F12663DBD544B30EADB67943E1E98316D29C3134F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.ce.a9ea9638e58c32dfb44e4c3ef10d6cb9

File Explorer

jaffacakes118_Virus.Win32.Virut.ce.a9ea9638e58c32dfb44e4c3ef10d6cb9

.exe 1.0MB

jaffacakes118_Virus.Win32.Virut.ce.a9ea9638e58c32dfb44e4c3ef10d6cb9

IMPHASH e1a296b54ec109c945aa1374ff5bbf8c
SHA256 7e47af22f74fd8724c5ff8bc5e0fe418e12cd71be3250162cb80befe048366a2
MD5 a9ea9638e58c32dfb44e4c3ef10d6cb9
SHA1 6d89e339ad85ae584121482182eacc72e3adc832
SHA512 9d16fe923640c8b042713bad053ac25b3ce63850494f0bd7378b1e56a5a2979fe187118fc017714e5278f80ffa45558676c0d4576017ba6a4ae33e46d8bcaa20
SSDEEP 24576:2HY6vlHIP3+sN2C9LpcJm8GBRJrGkancMMMMMMcg:ci3FNTgyHJNMMMMMMx
TLSH
T1A5259C10BBD9C072E8A92E36147A7F12663DBD544B30EADB67943E1E98316D29C3134F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

663605

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

d:\Projects\WinRAR\build\winrar32\Release\WinRAR.pdb

comctl32

ord17 ord8 ord6 ImageList_ReplaceIcon ImageList_Create ImageList_Destroy ImageList_Remove ImageList_AddMasked ImageList_Add PropertySheetA

kernel32

GetFileType CreateFileA ReadFile GetStdHandle WriteFile GetDiskFreeSpaceA GetFileAttributesW SetFileAttributesW GetFullPathNameA GetFullPathNameW MoveFileW DeleteFileW RemoveDirectoryA RemoveDirectoryW DeviceIoControl CreateDirectoryA CreateDirectoryW ExpandEnvironmentStringsW FindNextFileW FindFirstFileW MultiByteToWideChar GetVersionExA CompareFileTime FindCloseChangeNotification SetEvent lstrcmpiA FindFirstChangeNotificationA SetCurrentDirectoryW GetLocaleInfoA GetNumberFormatA GetLocalTime CreateThread ExitThread GetProcessAffinityMask ResetEvent WaitForMultipleObjects CreateEventA GetCompressedFileSizeA FindResourceA SizeofResource LoadResource LoadLibraryExA UpdateResourceA EnumResourceLanguagesA EndUpdateResourceA EnumResourceNamesA BeginUpdateResourceA CompareStringA SetThreadPriority GetCurrentThread SetPriorityClass SetCurrentDirectoryA CompareStringW IsDBCSLeadByte GetCPInfo GlobalMemoryStatus GetLogicalDrives lstrlenA ResumeThread SuspendThread GetFileTime GetCurrentThreadId GetThreadPriority GetPriorityClass WritePrivateProfileStringA GetPrivateProfileIntA GetPrivateProfileStringA SetErrorMode GetCommandLineW GetCurrentProcessId MulDiv GetProfileStringA FindNextChangeNotification SetEnvironmentVariableA WriteConsoleW GetConsoleOutputCP WriteConsoleA GetStringTypeW GetStringTypeA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA InitializeCriticalSectionAndSpinCount GetVersion HeapSize SetHandleCount GetConsoleMode GetConsoleCP LCMapStringW LCMapStringA IsValidCodePage GetOEMCP GetACP InterlockedDecrement InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue ExitProcess GetModuleHandleW IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter TerminateProcess VirtualAlloc DeleteCriticalSection VirtualFree HeapCreate GetStartupInfoA GetCommandLineA LeaveCriticalSection EnterCriticalSection SetStdHandle RaiseException RtlUnwind HeapAlloc HeapReAlloc HeapFree SetFilePointer FlushFileBuffers SetEndOfFile SetFileTime BackupSeek BackupRead CreateFileW GetCurrentProcess SetLastError FormatMessageA LocalFree WideCharToMultiByte GetLogicalDriveStringsA GetModuleHandleA CreateMutexA ReleaseMutex GetProcessHeap GetLastError GlobalSize GlobalAlloc GlobalLock GlobalUnlock lstrcpyA GlobalFree GetTickCount GetSystemTime SystemTimeToFileTime CreateFileMappingA WaitForSingleObject OpenFileMappingA MapViewOfFile CloseHandle UnmapViewOfFile GetCurrentDirectoryW GetModuleFileNameA FindNextFileA MoveFileA LoadLibraryA GetProcAddress FreeLibrary LocalFileTimeToFileTime CopyFileA Sleep GetTempPathA ExpandEnvironmentStringsA GetDriveTypeA FileTimeToDosDateTime SetFileAttributesA DeleteFileA FindFirstFileA FileTimeToSystemTime FileTimeToLocalFileTime GetTimeFormatA GetDateFormatA FindClose DosDateTimeToFileTime GetFileAttributesA GetCurrentDirectoryA GetSystemTimeAsFileTime

user32

CreateDialogParamA PostThreadMessageA CharToOemBuffA IsChild GetLastActivePopup GetClipboardData GetMenuItemID PostQuitMessage InsertMenuA LoadMenuA RegisterClassA LoadAcceleratorsA FindWindowA GetMenuState SetDlgItemTextW CreateIconIndirect TranslateAcceleratorA IsDialogMessageA SetPropA RegisterWindowMessageA SetMenu EnumWindows FindWindowExA CreateIcon SetWindowTextW GetWindowTextW FlashWindow CharUpperW IsIconic IntersectRect ValidateRect GetSysColor CopyImage FillRect ExitWindowsEx SetScrollPos DrawIconEx LoadStringA GetWindow SetMenuItemInfoA IsCharUpperW IsCharAlphaW CharLowerW IsCharUpperA IsCharAlphaA CharLowerA OpenClipboard EmptyClipboard SetClipboardData CharToOemA CloseClipboard MessageBeep PeekMessageA GetFocus SetForegroundWindow CopyIcon EnableMenuItem CheckMenuItem LoadBitmapA InsertMenuItemA LoadImageA MapWindowPoints SetTimer KillTimer UpdateWindow CharUpperA GetClientRect BeginPaint EndPaint SetWindowTextA IsWindow GetWindowTextLengthA AppendMenuA ScrollWindowEx LoadIconA SetScrollRange GetDialogBaseUnits PtInRect SendMessageW GetWindowPlacement SetWindowPlacement CreateDialogIndirectParamA GetPropA RemovePropA GetSystemMenu BringWindowToTop GetMessageA TranslateMessage DispatchMessageA RedrawWindow GetIconInfo SendMessageA SetFocus SetWindowPos CreateWindowExA DestroyWindow GetWindowTextA AppendMenuW DrawMenuBar GetMenu GetSubMenu DeleteMenu GetMenuItemCount GetMenuItemInfoA ScreenToClient ClientToScreen CreatePopupMenu SetWindowLongA TrackPopupMenu DestroyMenu CallWindowProcA RegisterClipboardFormatA GetKeyState LoadCursorA SetCursor GetCursorPos WindowFromPoint GetWindowThreadProcessId InvalidateRect GetDC ReleaseDC GetDesktopWindow GetWindowLongA GetSystemMetrics ShowWindow EnableWindow IsWindowEnabled SetDlgItemInt GetDlgItemInt IsDlgButtonChecked PostMessageA EnumChildWindows GetParent GetDlgItem GetWindowRect GetClassNameA CheckDlgButton MessageBoxA IsWindowVisible OemToCharBuffA DialogBoxParamA SendDlgItemMessageA DestroyIcon GetDlgItemTextA SetDlgItemTextA EndDialog OemToCharA DefWindowProcA MoveWindow

gdi32

MoveToEx Rectangle LineTo CreatePatternBrush GetDeviceCaps CreateCompatibleBitmap CreateBitmap GetMapMode SetPixel SetMapMode StretchBlt GetTextExtentPoint32A SetBkColor BitBlt GetObjectA CreateCompatibleDC GetPixel DeleteDC ExtTextOutA TextOutA CreatePen CreateSolidBrush SetTextColor Polygon Polyline SelectObject GetTextFaceA GetTextMetricsA CreateFontA DPtoLP DeleteObject

comdlg32

GetOpenFileNameW GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError ChooseFontA

advapi32

LookupPrivilegeValueA OpenProcessToken SetFileSecurityA SetFileSecurityW GetSecurityDescriptorLength GetFileSecurityA GetFileSecurityW RegCloseKey RegQueryValueExA RegOpenKeyExA RegEnumValueA RegQueryValueExW RegSetValueExW RegSetValueExA RegCreateKeyExA RegEnumKeyExA RegDeleteValueA RegDeleteKeyA AdjustTokenPrivileges

shell32

DragFinish DragQueryFileA DragQueryFileW DragAcceptFiles Shell_NotifyIconA ShellExecuteA ExtractIconExA SHFileOperationA ShellExecuteExA SHGetMalloc SHBrowseForFolderA SHChangeNotify SHGetDesktopFolder SHGetSpecialFolderLocation SHGetPathFromIDListA SHGetFileInfoA FindExecutableA

ole32

OleInitialize CoCreateInstance OleSetClipboard DoDragDrop OleUninitialize