jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]eead9c523e039c9aae08987d59874d2d

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.eead9c523e039c9aae08987d59874d2d
Size 2.5MB
Sample261014-e1cwbaf15r
SHA256 476ea4d586a2868b5e6d09b14099e678bef5c5180792878ad6fda5d0c052b546
MD5 eead9c523e039c9aae08987d59874d2d
SHA1 966d5cae10e35118e2a5c3674329c354d342ad1d
SHA512 db5df0dc77f932c74786631703901820ffeb1717e51ff820a90a23d240d97267f94af76e2958ce8892e95bc4fe40ae141aa97e277c58d8a5fb9e6a206f27d9e9
SSDEEP 24576:c7LNoxwqyf4ClOQbi6OimwxgPrVDMVEx3Ff89E09GlZbZ:ANDfxpZuVKE3DD1
TLSH
T12FC5DFB0A092502AC78AD270C4A453E198D4AE3FB37278E36F5B761E52B13B7BD44E41
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.eead9c523e039c9aae08987d59874d2d

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.eead9c523e039c9aae08987d59874d2d

.exe 2.5MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.eead9c523e039c9aae08987d59874d2d

IMPHASH cc2441a8b75c91868d504c26cdb9a053
SHA256 476ea4d586a2868b5e6d09b14099e678bef5c5180792878ad6fda5d0c052b546
MD5 eead9c523e039c9aae08987d59874d2d
SHA1 966d5cae10e35118e2a5c3674329c354d342ad1d
SHA512 db5df0dc77f932c74786631703901820ffeb1717e51ff820a90a23d240d97267f94af76e2958ce8892e95bc4fe40ae141aa97e277c58d8a5fb9e6a206f27d9e9
SSDEEP 24576:c7LNoxwqyf4ClOQbi6OimwxgPrVDMVEx3Ff89E09GlZbZ:ANDfxpZuVKE3DD1
TLSH
T12FC5DFB0A092502AC78AD270C4A453E198D4AE3FB37278E36F5B761E52B13B7BD44E41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

10

Major OS version

5

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetProcAddress GlobalAlloc VirtualAlloc HeapAlloc HeapFree HeapSize GetCurrentThreadId GetLastError SetHandleCount SetEndOfFile FileTimeToSystemTime FormatMessageW lstrlenW LoadLibraryExW GetCommandLineW GetOEMCP LCMapStringW GetLocaleInfoW GetUserDefaultLCID InterlockedIncrement InterlockedDecrement GetStringTypeW GetStringTypeA LCMapStringA MultiByteToWideChar LoadLibraryA HeapReAlloc GetACP GetCPInfo LeaveCriticalSection EnterCriticalSection InitializeCriticalSection WriteFile RtlUnwind VirtualFree GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW GetStdHandle GetFileType TlsSetValue TlsAlloc SetLastError TlsGetValue GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate

wininet

HttpSendRequestW InternetConnectW HttpQueryInfoW

shlwapi

StrChrW StrCmpNW StrCmpNIW SHSetValueW SHGetValueW SHDeleteValueW PathCreateFromUrlW UrlUnescapeW UrlCanonicalizeW PathStripPathW PathRemoveFileSpecW PathIsURLW PathIsUNCW PathIsDirectoryW PathCombineW StrFormatByteSizeW StrDupW

uxtheme

SetWindowTheme DrawThemeParentBackground DrawThemeBackground

Sharing