jaffacakes118_Virus[.]Win32[.]Virut[.]ce[.]0a084f02f67c530d49e183e5742ad931

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Virus.Win32.Virut.ce.0a084f02f67c530d49e183e5742ad931
Size 114KB
Sample261015-2bzecaet3m
SHA256 b2fe51dfdc1d1f21ec8a964077054de4f6b717bc81c705c2e327c9e392bcc928
MD5 0a084f02f67c530d49e183e5742ad931
SHA1 094a8b2b134b20d4f621bb6f61a49dc485dc4924
SHA512 3f3ae71b4b630b6e427ce302272cd144916073e8c0f5fd004caa3398b4133cb330408b7aa3845011dfe822940a01c001aa59d03f858d803580734a8111e8fef5
SSDEEP 1536:6JNJWVhdcFLSV0Ka+BhIF1Aktwxh94VsgSziuJz8jcojq8IMTWbKmToz0Qb59:vh9j5BuFkx07jzjq8fEKmC0C59
TLSH
T1EFB3E086F3E48A7CE45016B1582A22904B38BC254F95A7EF629D772F5C313819E7237F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Virus.Win32.Virut.ce.0a084f02f67c530d49e183e5742ad931

File Explorer

jaffacakes118_Virus.Win32.Virut.ce.0a084f02f67c530d49e183e5742ad931

.exe 114KB

jaffacakes118_Virus.Win32.Virut.ce.0a084f02f67c530d49e183e5742ad931

IMPHASH 3369686e4c7e34390e6d4763f79a86d9
SHA256 b2fe51dfdc1d1f21ec8a964077054de4f6b717bc81c705c2e327c9e392bcc928
MD5 0a084f02f67c530d49e183e5742ad931
SHA1 094a8b2b134b20d4f621bb6f61a49dc485dc4924
SHA512 3f3ae71b4b630b6e427ce302272cd144916073e8c0f5fd004caa3398b4133cb330408b7aa3845011dfe822940a01c001aa59d03f858d803580734a8111e8fef5
SSDEEP 1536:6JNJWVhdcFLSV0Ka+BhIF1Aktwxh94VsgSziuJz8jcojq8IMTWbKmToz0Qb59:vh9j5BuFkx07jzjq8fEKmC0C59
TLSH
T1EFB3E086F3E48A7CE45016B1582A22904B38BC254F95A7EF629D772F5C313819E7237F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

127213

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

LocationNotifications.pdb

advapi32

GetTraceEnableFlags GetTraceEnableLevel GetTraceLoggerHandle RegisterTraceGuidsW UnregisterTraceGuids TraceMessage

kernel32

ExpandEnvironmentStringsW GetLastError CloseHandle ReleaseMutex CreateMutexW Sleep InterlockedCompareExchange GetStartupInfoA SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess GetSystemTimeAsFileTime GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter GetModuleHandleA InterlockedExchange

user32

PostQuitMessage DefWindowProcW RegisterWindowMessageW RegisterClassExW LoadCursorW LoadIconW CreateWindowExW LoadStringW UnregisterClassW DispatchMessageW GetMessageW LoadImageW DestroyIcon SetTimer SetMenuItemInfoW LoadMenuW PostMessageW TrackPopupMenuEx GetSubMenu SetForegroundWindow GetCursorPos KillTimer TranslateMessage DestroyMenu

msvcrt

??3@YAXPAX@Z memset ??2@YAPAXI@Z ??_V@YAXPAX@Z memcpy_s ??_U@YAPAXI@Z __getmainargs _cexit _exit _XcptFilter _ismbblead exit _controlfp _except_handler4_common ?terminate@@YAXXZ __set_app_type __p__fmode __p__commode __setusermatherr _initterm _acmdln _amsg_exit

wevtapi

EvtCreateRenderContext EvtRender EvtClose EvtSubscribe

shell32

ShellExecuteW Shell_NotifyIconW

ntdll

WinSqmAddToStream

ole32

CoCreateInstance CoTaskMemFree CoUninitialize CoInitialize CoTaskMemAlloc

setupapi

SetupDiEnumDeviceInterfaces SetupDiGetClassDevsExW SetupDiGetDeviceInterfaceDetailW SetupDiDestroyDeviceInfoList