jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]edcf21caec5f8df8676ca1a1d419159f

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.edcf21caec5f8df8676ca1a1d419159f
Size 3.2MB
Sample261014-e1a2qav12n
SHA256 61c2ff7a0c1e8fd78f43c56bc27edc8c91677b0ddbf58db8a3173a3777fa230c
MD5 edcf21caec5f8df8676ca1a1d419159f
SHA1 f381b31f916063fbdc049d276777298c16c622fd
SHA512 93f34896f0986ace5b4b36322a04b51c86431338d8e111bb5920defadf00a56b30ab9afad0cb91e7081440954befab80fdfc98a67c69bd8068aefc5d701152b4
SSDEEP 12288:/jHwz1aPMzUQDEKcC2XBkwjRKFDKROdfJkj1Pgf27LbK12PIlRtQD5T3xMY7jP3o:/cz1aPmDpckIsF8e27Lu66g5ThMEQI+
TLSH
T1DCF5EF33A1CFD479C46B05B789A1992018E42D616BEC19F236CFBA3F0535EDE6721A13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.edcf21caec5f8df8676ca1a1d419159f

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.edcf21caec5f8df8676ca1a1d419159f

.exe 3.2MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.edcf21caec5f8df8676ca1a1d419159f

IMPHASH c9d71e4223ffced640d0b7b45e781237
SHA256 61c2ff7a0c1e8fd78f43c56bc27edc8c91677b0ddbf58db8a3173a3777fa230c
MD5 edcf21caec5f8df8676ca1a1d419159f
SHA1 f381b31f916063fbdc049d276777298c16c622fd
SHA512 93f34896f0986ace5b4b36322a04b51c86431338d8e111bb5920defadf00a56b30ab9afad0cb91e7081440954befab80fdfc98a67c69bd8068aefc5d701152b4
SSDEEP 12288:/jHwz1aPMzUQDEKcC2XBkwjRKFDKROdfJkj1Pgf27LbK12PIlRtQD5T3xMY7jP3o:/cz1aPmDpckIsF8e27Lu66g5ThMEQI+
TLSH
T1DCF5EF33A1CFD479C46B05B789A1992018E42D616BEC19F236CFBA3F0535EDE6721A13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

62974

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetEvent SetEndOfFile SystemTimeToTzSpecificLocalTime FileTimeToLocalFileTime FormatMessageW LoadLibraryExW GetModuleFileNameW ExpandEnvironmentStringsW CreateFileW ReadDirectoryChangesW CompareStringW GetConsoleWindow GetCommandLineW RaiseException IsProcessorFeaturePresent EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount InitializeCriticalSection GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCPInfo EnterCriticalSection LeaveCriticalSection HeapFree OutputDebugStringW GetStringTypeW HeapAlloc HeapReAlloc HeapSize LCMapStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CloseHandle FreeEnvironmentStringsW ExitProcess VirtualAlloc Sleep RtlUnwind

user32

CheckRadioButton GetNextDlgTabItem GetDlgCtrlID GetClipboardOwner CharPrevW MsgWaitForMultipleObjects GetMenuItemCount AppendMenuW TrackPopupMenu TrackPopupMenuEx EnableScrollBar EnumPropsExW GetWindowRect SetCursorPos SetDlgItemInt MapWindowPoints InvertRect CopyRect InflateRect GetWindowLongW GetClassNameW GetTopWindow DrawIconEx IsDialogMessageW DialogBoxParamW IsWindow ExitWindowsEx PeekMessageW TranslateMessage DestroyCaret GetDlgItem

advapi32

RegDeleteKeyW RegOpenKeyExW OpenSCManagerW RegEnumValueW

ntdsapi

DsFreeNameResultW

Sharing