jaffacakes118_Virus[.]Win32[.]Virut[.]q[.]3e26ff0d3f4c9c83a5c6b

General

Target
jaffacakes118_Virus.Win32.Virut.q.3e26ff0d3f4c9c83a5c6b
Size 93KB
Sample261014-p7phssds4l
SHA256 02322988f53f1b06202c029115315141d5292b6a96e9ea293a85b15fddbafcf5
MD5 3e1f003a6d63e26ff0d3f4c9c83a5c6b
SHA1 b002ec12b7ac396931c0c0e28b47bff697e1e6b2
SHA512 6963dc8744282a34da599e11c58eb3fc7356a7cdf68f80d8e57f260c0540cdb131544346ea75a2c41384525421f6d445baafe5682e0030ee23167c3f9662cca1
SSDEEP 1536:g+gisi/OTW1bk3FwErVvHcT3BignpwLsO9NXw6dcw3hwi8m:gIZ1bk1FVvHcTBO4O9fcCFv
TLSH
T14E938D05D4129176E06310F1AABB46BD617C5BE233822EE7C388BC695F368F6797106F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.q.3e26ff0d3f4c9c83a5c6b

File Explorer

jaffacakes118_Virus.Win32.Virut.q.3e26ff0d3f4c9c83a5c6b

.exe 93KB

jaffacakes118_Virus.Win32.Virut.q.3e26ff0d3f4c9c83a5c6b

IMPHASH 79b96456f9efc94c33ade5e8ec421b2f
SHA256 02322988f53f1b06202c029115315141d5292b6a96e9ea293a85b15fddbafcf5
MD5 3e1f003a6d63e26ff0d3f4c9c83a5c6b
SHA1 b002ec12b7ac396931c0c0e28b47bff697e1e6b2
SHA512 6963dc8744282a34da599e11c58eb3fc7356a7cdf68f80d8e57f260c0540cdb131544346ea75a2c41384525421f6d445baafe5682e0030ee23167c3f9662cca1
SSDEEP 1536:g+gisi/OTW1bk3FwErVvHcT3BignpwLsO9NXw6dcw3hwi8m:gIZ1bk1FVvHcTBO4O9fcCFv
TLSH
T14E938D05D4129176E06310F1AABB46BD617C5BE233822EE7C388BC695F368F6797106F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

91136

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetCurrentProcessId CloseHandle CreateFileA GetModuleFileNameA Sleep CreateThread SetLastError GetLastError TerminateProcess OpenProcess ReadFile GetFileSize WriteFile SetFilePointer SetFileAttributesA GetLocalTime ResumeThread SetThreadContext VirtualProtectEx WriteProcessMemory VirtualAllocEx IsBadReadPtr FreeLibrary GetProcAddress LoadLibraryA ReadProcessMemory GetThreadContext CreateProcessA GetCurrentDirectoryA GetWindowsDirectoryA MapViewOfFile OpenFileMappingA GetCommandLineA GetModuleHandleA GetTempFileNameA GetTempPathA DeleteFileA CopyFileA EndUpdateResourceA UpdateResourceA BeginUpdateResourceA GetProcessVersion lstrcmpiA WideCharToMultiByte MultiByteToWideChar

user32

MessageBoxA

msvcrt

memcpy ??3@YAXPAX@Z ftell fclose fread fseek strcpy __CxxFrameHandler _wcsnicmp wcscpy fwrite time memset strcat strlen ??2@YAPAXI@Z _strnicmp fopen wcslen _itoa _wcsicmp

msvcp60

??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@ABV01@@Z ??0_Lockit@std@@QAE@XZ ??1_Lockit@std@@QAE@XZ ??0?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@PBGABV?$allocator@G@1@@Z ??1?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QAE@XZ ?c_str@?$basic_string@GU?$char_traits@G@std@@V?$allocator@G@2@@std@@QBEPBGXZ

Sharing