jaffacakes118_Virus[.]Win32[.]Xpaj[.]gen[.]41ba647b9325b5c6ed14fa5ecc858269

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Xpaj.gen.41ba647b9325b5c6ed14fa5ecc858269
Size 365KB
Sample261012-1dbkmaxv5p
SHA256 917f048cc2fd039865af7a1489feb414a944b25c3217f9568615c2f4e70b7c74
MD5 41ba647b9325b5c6ed14fa5ecc858269
SHA1 6963c8b240b2611ee883c025b831d3eb2d2de2b9
SHA512 83fb07cdd965d8071b2157160e99395eb19b6b41cad8c4014013d71ed1329e34f8c2b5a4b4cce0232f4e670bb034cbb5df17189e09afdf82fed7c78f6fcf7a01
SSDEEP 6144:0GBH6g5+eYMnAhI5qtr6q1gtu1TAD3Z/O8xeY+HDDO2+kUD1WsoA9CU:RaC9Fq1gg1TsZbxejjGBLJ
TLSH
T15E84B034D5C2DD67D8D7A374123E3139F17FEB29946EB2A60288DA586970640EB38F07
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Xpaj.gen.41ba647b9325b5c6ed14fa5ecc858269

File Explorer

jaffacakes118_Virus.Win32.Xpaj.gen.41ba647b9325b5c6ed14fa5ecc858269

.dll 365KB

jaffacakes118_Virus.Win32.Xpaj.gen.41ba647b9325b5c6ed14fa5ecc858269

IMPHASH 95a05a5b41a65c8e39f66b88313cede3
SHA256 917f048cc2fd039865af7a1489feb414a944b25c3217f9568615c2f4e70b7c74
MD5 41ba647b9325b5c6ed14fa5ecc858269
SHA1 6963c8b240b2611ee883c025b831d3eb2d2de2b9
SHA512 83fb07cdd965d8071b2157160e99395eb19b6b41cad8c4014013d71ed1329e34f8c2b5a4b4cce0232f4e670bb034cbb5df17189e09afdf82fed7c78f6fcf7a01
SSDEEP 6144:0GBH6g5+eYMnAhI5qtr6q1gtu1TAD3Z/O8xeY+HDDO2+kUD1WsoA9CU:RaC9Fq1gg1TsZbxejjGBLJ
TLSH
T15E84B034D5C2DD67D8D7A374123E3139F17FEB29946EB2A60288DA586970640EB38F07
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5051

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

unidrvui.pdb

gdi32

SetGraphicsMode EnumFontFamiliesW CreateICW DeleteDC

kernel32

LoadLibraryExW GetLocaleInfoW GetFileAttributesExW GetSystemDefaultLCID GetFileTime CompareFileTime CopyFileW lstrlenW FindResourceW LoadResource LockResource SizeofResource Sleep SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetFileAttributesW CreateFileMappingW MapViewOfFile UnmapViewOfFile GetFileSize MultiByteToWideChar SetErrorMode FindFirstFileW FindNextFileW FindClose SetFilePointer InterlockedDecrement InterlockedIncrement HeapFree WideCharToMultiByte LoadLibraryW FreeLibrary CreateDirectoryW MoveFileExW GetTempFileNameW LocalFree HeapAlloc LocalAlloc SetLastError HeapDestroy GetLastError HeapCreate MulDiv CloseHandle DeleteFileW CreateFileW WriteFile ReadFile GetProcAddress

msvcrt

_stricmp _wcsnicmp memmove ??3@YAXPAX@Z ??2@YAPAXI@Z wcsncpy strncpy free _initterm _adjust_fdiv _wcsicmp malloc wcsrchr _vsnwprintf wcscmp wcslen qsort strncmp _wtol iswctype _strnicmp isspace

rpcrt4

UuidToStringW UuidCreate RpcStringFreeW

user32

SetCursor SendMessageW InvalidateRect SendDlgItemMessageW EnableWindow SetDlgItemTextA LoadIconW DialogBoxParamW EndDialog SetWindowLongW SetDlgItemTextW GetDlgItem ShowWindow CheckRadioButton LoadStringW MessageBoxW MessageBeep LoadCursorW GetDlgItemTextW WinHelpW GetWindowLongW

winspool.drv

SetPrinterW GetPrinterDriverW GetFormW EnumFormsW DeletePrinterDataW SetPrinterDataW GetPrinterW GetPrinterDataW GetPrinterDriverDirectoryW DeleteFormW AddFormW OpenPrinterW ClosePrinter