jaffacakes118_Virus[.]Win32[.]Virut[.]ce[.]eaecc8e74f3ce6f3dd92d88f7cc4c831

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Virut.ce.eaecc8e74f3ce6f3dd92d88f7cc4c831
Size 119KB
Sample261012-1csshsa16n
SHA256 333edfd4d8f48a7b8cebffa0dc5c847af20403af3a3c3f99a65f5f7423a1e848
MD5 eaecc8e74f3ce6f3dd92d88f7cc4c831
SHA1 7fc43387ff72c7ffa1dc4792068f9e3697a7dd2f
SHA512 0b3d8007e5449260736c34f6831041215d6ef245bd544dc9ec2bfa7afdabbd9a27dce69a7ae39d8f07202736f7c0f53758c648e0cfc72153ef030220ab0bdc53
SSDEEP 3072:VYunwoiem+z2in3qhmLSo94DaVs9smJiOb:VYuvxm+zLZy9s2i
TLSH
T11CC3071152E94021F4F23B3018B90A708B7BBC519E38CA8E568C5A6D5BF7B52DE74B37
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.ce.eaecc8e74f3ce6f3dd92d88f7cc4c831

File Explorer

jaffacakes118_Virus.Win32.Virut.ce.eaecc8e74f3ce6f3dd92d88f7cc4c831

.exe 119KB

jaffacakes118_Virus.Win32.Virut.ce.eaecc8e74f3ce6f3dd92d88f7cc4c831

IMPHASH aae38da216fd60b3b7689e2a3c11d2a3
SHA256 333edfd4d8f48a7b8cebffa0dc5c847af20403af3a3c3f99a65f5f7423a1e848
MD5 eaecc8e74f3ce6f3dd92d88f7cc4c831
SHA1 7fc43387ff72c7ffa1dc4792068f9e3697a7dd2f
SHA512 0b3d8007e5449260736c34f6831041215d6ef245bd544dc9ec2bfa7afdabbd9a27dce69a7ae39d8f07202736f7c0f53758c648e0cfc72153ef030220ab0bdc53
SSDEEP 3072:VYunwoiem+z2in3qhmLSo94DaVs9smJiOb:VYuvxm+zLZy9s2i
TLSH
T11CC3071152E94021F4F23B3018B90A708B7BBC519E38CA8E568C5A6D5BF7B52DE74B37
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34890

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

netsh.pdb

msvcrt

_controlfp __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __wgetmainargs __winitenv exit _cexit _XcptFilter _exit _c_exit wcspbrk _except_handler3 _wctime printf time fflush fgets _wcsnicmp wprintf swprintf _iob _wfopen fclose iswctype _wcslwr wcstok _wcsdup wcscpy wcslen wcsncpy wcscat qsort _wcsicmp wcschr _wcsupr wcsrchr free wcscmp

advapi32

RegQueryValueExW CloseEventLog NotifyChangeEventLog OpenEventLogW ReadEventLogW RegQueryInfoKeyW RegEnumValueW RegCreateKeyExW RegSetValueExW RegOpenKeyExW RegDeleteValueW RegCloseKey RegConnectRegistryW

kernel32

GetLastError HeapAlloc GetProcessHeap HeapFree GetModuleHandleA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter SetFilePointer WaitForMultipleObjectsEx WideCharToMultiByte GetConsoleOutputCP MultiByteToWideChar WriteFile WaitForSingleObject ResetEvent CreateEventW CreateConsoleScreenBuffer SetConsoleScreenBufferSize SetConsoleActiveScreenBuffer GetConsoleScreenBufferInfo FillConsoleOutputCharacterW FillConsoleOutputAttribute SetConsoleCursorPosition CreateFileW FreeLibrary GetProcAddress LoadLibraryW HeapReAlloc GetComputerNameW SetConsoleCtrlHandler GetModuleHandleW FormatMessageW LocalFree GetStdHandle SetEvent ExpandEnvironmentStringsW CloseHandle OpenEventW

mprapi

MprConfigGetFriendlyName MprConfigBufferFree MprConfigInterfaceEnum MprConfigGetGuidName MprAdminGetErrorString MprConfigInterfaceGetHandle

ntdll

RtlInitUnicodeString RtlGUIDFromString

ole32

CoUninitialize CoSetProxyBlanket CoCreateInstance CoInitializeEx

oleaut32

SysFreeString VariantChangeType SysAllocString

rasapi32

RasGetErrorStringW

user32

LoadStringW wsprintfW

iphlpapi

NhGetInterfaceNameFromGuid