jaffacakes118_Worm[.]Win32[.]AutoRun[.]etjz[.]1ee6e9cdf4a18bef024da369ddec1e1d

General

Target
jaffacakes118_Worm.Win32.AutoRun.etjz.1ee6e9cdf4a18bef024da369ddec1e1d
Size 134KB
Sample261015-2d7thady7s
SHA256 8a25f926bd2a753839a12f9b6d9af51dc2b222a9c45dcedc9c916c38eb37baf1
MD5 1ee6e9cdf4a18bef024da369ddec1e1d
SHA1 37349698e0ddac0c6e1ee91d28db2fd111f64568
SHA512 8784897cb476536462ca12fc0769198f7cfaa24dcb0a1488bb2ccb5a941f3a3ac8a1cc6aa0f022769b4b4a5a8c80c9f4cde5f0699316fd1d8675b0fa418d4d4d
SSDEEP 1536:dzOepvjSyLjQ85akEklV85gwlQhd54vctgo:nQq6klV85gwlQ7f5
TLSH
T18ED309027227E1F4D81C9876051761F62BCA2C715E0EED167158BF3B3D722D4AE1A72B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.AutoRun.etjz.1ee6e9cdf4a18bef024da369ddec1e1d

File Explorer

jaffacakes118_Worm.Win32.AutoRun.etjz.1ee6e9cdf4a18bef024da369ddec1e1d

.exe 134KB

jaffacakes118_Worm.Win32.AutoRun.etjz.1ee6e9cdf4a18bef024da369ddec1e1d

IMPHASH 7fd55c2aec4583c4e175305f7f1963cf
SHA256 8a25f926bd2a753839a12f9b6d9af51dc2b222a9c45dcedc9c916c38eb37baf1
MD5 1ee6e9cdf4a18bef024da369ddec1e1d
SHA1 37349698e0ddac0c6e1ee91d28db2fd111f64568
SHA512 8784897cb476536462ca12fc0769198f7cfaa24dcb0a1488bb2ccb5a941f3a3ac8a1cc6aa0f022769b4b4a5a8c80c9f4cde5f0699316fd1d8675b0fa418d4d4d
SSDEEP 1536:dzOepvjSyLjQ85akEklV85gwlQhd54vctgo:nQq6klV85gwlQ7f5
TLSH
T18ED309027227E1F4D81C9876051761F62BCA2C715E0EED167158BF3B3D722D4AE1A72B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

8736

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

lstrcmpiA lstrlenA GetModuleFileNameA GetModuleHandleA CreateDirectoryA SetFileAttributesA SetCurrentDirectoryA FindClose FindNextFileA FindFirstFileA GetSystemDirectoryA GetDriveTypeA GetLogicalDriveStringsA lstrcpyA lstrcatA CopyFileA CreateFileA GetVersionExA CloseHandle GetCommandLineA GetStartupInfoA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapAlloc RaiseException GetModuleHandleW Sleep GetProcAddress ExitProcess WriteFile GetStdHandle FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW WideCharToMultiByte GetLastError GetEnvironmentStringsW SetHandleCount GetFileType DeleteCriticalSection TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement HeapCreate VirtualFree HeapFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer GetConsoleCP GetConsoleMode EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP GetOEMCP IsValidCodePage HeapSize VirtualAlloc HeapReAlloc LoadLibraryA InitializeCriticalSectionAndSpinCount RtlUnwind SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW MultiByteToWideChar LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetLocaleInfoA FlushFileBuffers

advapi32

RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey RegCreateKeyExA

shell32

ShellExecuteA

Sharing