jaffacakes118_not-a-virus[.]AdWare[.]Win32[.]StartSurf[.]dfdd[.]5fa84de889611993cd04a4e39acfe45c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.AdWare.Win32.StartSurf.dfdd.5fa84de889611993cd04a4e39acfe45c
Size 1.2MB
Sample261014-d62aese141
SHA256 648c3d1d8ca5bfd3ac53075f9540cc3e0d57e0ec786ee0c72b54d628d9ae1184
MD5 5fa84de889611993cd04a4e39acfe45c
SHA1 50cd4473f937458bcb45b8f1badc249950d34ed3
SHA512 5d244b544ea28fad9d1f97b7f717c22206a45a92a576421cebec5dd23c9d21c8af49df6f8beba6a1a3bf4a7ec24dcf189c2b89392ce723a7bbc687ad106a45bb
SSDEEP 12288:/jMmPXFaB+rzOLtyRtQC5u+qYohGf1dWhAZjdkSNDgRSOJI0PsnsyKGxO:7MqVa8SwhdOAf1a6uKURSsZyNKkO
TLSH
T12B451271F0D0E2DAC8A5563ADDA5ACB159783EB755904913F3CABF3E3A31082E914317
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.AdWare.Win32.StartSurf.dfdd.5fa84de889611993cd04a4e39acfe45c

File Explorer

jaffacakes118_not-a-virus.AdWare.Win32.StartSurf.dfdd.5fa84de889611993cd04a4e39acfe45c

.exe 1.2MB

jaffacakes118_not-a-virus.AdWare.Win32.StartSurf.dfdd.5fa84de889611993cd04a4e39acfe45c

IMPHASH 7986dd16c10b6861ae1b55f458d33f74
SHA256 648c3d1d8ca5bfd3ac53075f9540cc3e0d57e0ec786ee0c72b54d628d9ae1184
MD5 5fa84de889611993cd04a4e39acfe45c
SHA1 50cd4473f937458bcb45b8f1badc249950d34ed3
SHA512 5d244b544ea28fad9d1f97b7f717c22206a45a92a576421cebec5dd23c9d21c8af49df6f8beba6a1a3bf4a7ec24dcf189c2b89392ce723a7bbc687ad106a45bb
SSDEEP 12288:/jMmPXFaB+rzOLtyRtQC5u+qYohGf1dWhAZjdkSNDgRSOJI0PsnsyKGxO:7MqVa8SwhdOAf1a6uKURSsZyNKkO
TLSH
T12B451271F0D0E2DAC8A5563ADDA5ACB159783EB755904913F3CABF3E3A31082E914317
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetSpecialFolderLocation ShellAboutW DragFinish

wininet

HttpOpenRequestW InternetConnectW InternetCrackUrlW HttpAddRequestHeadersW

comctl32

ImageList_Draw InitializeFlatSB FlatSB_GetScrollInfo CreateStatusWindowW CreateToolbarEx ImageList_SetIconSize ImageList_Write ImageList_GetDragImage ImageList_DragShowNolock CreatePropertySheetPageW PropertySheetW ImageList_Create ImageList_GetImageCount ImageList_Add ImageList_ReplaceIcon ImageList_SetBkColor ImageList_GetBkColor ImageList_Replace ImageList_DrawIndirect ImageList_Remove ImageList_LoadImageW ImageList_BeginDrag ImageList_DragEnter ImageList_DragMove

kernel32

GetACP GetOEMCP WideCharToMultiByte LCMapStringA GetStringTypeA GetProcAddress GlobalLock GlobalUnlock VirtualAlloc GetCurrentThreadId GetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection WaitForSingleObject SetHandleCount CloseHandle FormatMessageW CreateFileMappingW GetCommandLineW GetSystemDirectoryW LCMapStringW GetCPInfo GetModuleHandleA GetStartupInfoW GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar FreeEnvironmentStringsW GetEnvironmentStringsW GetEnvironmentStrings GetCommandLineA GetStdHandle GetFileType GetStartupInfoA TlsSetValue TlsAlloc SetLastError TlsGetValue GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree HeapFree RtlUnwind WriteFile InitializeCriticalSection HeapAlloc HeapReAlloc LoadLibraryA InterlockedDecrement InterlockedIncrement GetStringTypeW

uxtheme

DrawThemeParentBackground GetCurrentThemeName IsAppThemed GetThemeSysColor IsThemeBackgroundPartiallyTransparent GetThemePartSize DrawThemeBackground