jaffacakes118_Worm[.]Win32[.]AutoRun[.]fcyi[.]35ac4ca7555100b18097b2c3e81e70d2

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Worm.Win32.AutoRun.fcyi.35ac4ca7555100b18097b2c3e81e70d2
Size 107KB
Sample261015-2effmstsa1
SHA256 16a60cdcccac9300f4dd95acbadf99c81e723cc125f03be6ae19da1b677f0863
MD5 35ac4ca7555100b18097b2c3e81e70d2
SHA1 a389177af2982433269c7baba736143a2c9928b2
SHA512 8a9ea305f0e917da8b7023a074977b771506dac1c3cd287d13ead828fd673a12bf9ec0640b068f166ca5df15a42fbcf1067f39f6f43452ab22a31192ca7c1a97
SSDEEP 1536:G+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZi:G+FDzK71QkbstyJjCKICpC72s/mlaXi
TLSH
T174B3E166F79A08D2D2848B3B878AAD70CE446D23454B10F989843FBF9D37D01B56D27A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Worm.Win32.AutoRun.fcyi.35ac4ca7555100b18097b2c3e81e70d2

File Explorer

jaffacakes118_Worm.Win32.AutoRun.fcyi.35ac4ca7555100b18097b2c3e81e70d2

.exe 107KB

jaffacakes118_Worm.Win32.AutoRun.fcyi.35ac4ca7555100b18097b2c3e81e70d2

IMPHASH ddbb90ebf41500dde8a2155d2d44be6d
SHA256 16a60cdcccac9300f4dd95acbadf99c81e723cc125f03be6ae19da1b677f0863
MD5 35ac4ca7555100b18097b2c3e81e70d2
SHA1 a389177af2982433269c7baba736143a2c9928b2
SHA512 8a9ea305f0e917da8b7023a074977b771506dac1c3cd287d13ead828fd673a12bf9ec0640b068f166ca5df15a42fbcf1067f39f6f43452ab22a31192ca7c1a97
SSDEEP 1536:G+FDoKtniY1u7Nn2JFkC2styJjCKICFjC7EWisS+5mlatSfkZi:G+FDzK71QkbstyJjCKICpC72s/mlaXi
TLSH
T174B3E166F79A08D2D2848B3B878AAD70CE446D23454B10F989843FBF9D37D01B56D27A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4540

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

oleaut32

VariantChangeTypeEx SysStringLen SysAllocStringLen VariantCopyInd VariantClear

version

VerQueryValueW GetFileVersionInfoSizeW GetFileVersionInfoW

advapi32

RegQueryValueExA RegCloseKey OpenProcessToken RegOpenKeyExA LookupPrivilegeValueA

kernel32

SetCommConfig CreateFileA CloseHandle FindResourceA Sleep DeleteFileA VirtualFree SetFilePointer SetErrorMode GetSystemInfo RemoveDirectoryA ReadFile GetUserDefaultLangID OutputDebugStringA GetEnvironmentVariableA GetWindowsDirectoryA GetLocaleInfoA LoadLibraryA GetACP LockResource GetFileSize FormatMessageA FlushViewOfFile GetExitCodeProcess GetFullPathNameA GetLastError GetSystemDefaultLCID SetEndOfFile GetFileAttributesA LoadResource VirtualQuery GetCurrentProcess SizeofResource GetProcAddress GetVersionExA GetModuleHandleA GetCommandLineA GetModuleFileNameA IsDBCSLeadByte CreateProcessA VirtualProtect CreateDirectoryA VirtualAlloc InterlockedExchange WriteFile ReadFile GetCommandLineA GetModuleHandleA GetLastError GetStdHandle CreateFileA GetFileSize ExitProcess WideCharToMultiByte LocalAlloc TlsSetValue VirtualAlloc LocalFree WriteFile LeaveCriticalSection GetFileType SetEndOfFile TlsGetValue SetFilePointer CloseHandle VirtualFree MultiByteToWideChar GetSystemTime RaiseException EnterCriticalSection DeleteCriticalSection

user32

MessageBoxA SetWindowLongA CharPrevA ExitWindowsEx TranslateMessage MsgWaitForMultipleObjects LoadStringA CallWindowProcA DestroyWindow CreateWindowExA PeekMessageA DispatchMessageA