jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Gaba[.]gen[.]268a59a151cb53f27c3c62fe632bae8d

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.268a59a151cb53f27c3c62fe632bae8d
Size 200KB
Sample261014-e2kmjsv13r
SHA256 2aeffc243fd2ba86ccb7ec8b9c912728a395c16f83676329411b24764033350f
MD5 268a59a151cb53f27c3c62fe632bae8d
SHA1 c7132b5e84b2b5c140c937604f2b4bbc6ac3f39d
SHA512 9fa06c054c6f66a491e0d916c41dc656a005352f79bbfd3752f6bc8c60ac84206271a03fde2db0f3319425ca8930549e17a5cf6fb71832f192b8cb6555321834
SSDEEP 3072:xg4d7z7z77ImwImMCkt25r/KEd1f0ax/Ve6ihQe1sXIQrNDwr730gtX3QrphoD3:FnwImMCRr/K6xo+lIye32v0
TLSH
T113147D1134C2C037F6BF017B89AB875A77F97C52ABA681CBAFC48E8D5E214C54E35252
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.268a59a151cb53f27c3c62fe632bae8d

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.268a59a151cb53f27c3c62fe632bae8d

.dll 200KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.268a59a151cb53f27c3c62fe632bae8d

IMPHASH 4f895b729ca149440ddc1f379848f360
SHA256 2aeffc243fd2ba86ccb7ec8b9c912728a395c16f83676329411b24764033350f
MD5 268a59a151cb53f27c3c62fe632bae8d
SHA1 c7132b5e84b2b5c140c937604f2b4bbc6ac3f39d
SHA512 9fa06c054c6f66a491e0d916c41dc656a005352f79bbfd3752f6bc8c60ac84206271a03fde2db0f3319425ca8930549e17a5cf6fb71832f192b8cb6555321834
SSDEEP 3072:xg4d7z7z77ImwImMCkt25r/KEd1f0ax/Ve6ihQe1sXIQrNDwr730gtX3QrphoD3:FnwImMCRr/K6xo+lIye32v0
TLSH
T113147D1134C2C037F6BF017B89AB875A77F97C52ABA681CBAFC48E8D5E214C54E35252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

55666

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Flipopia_work\Flipopia_full_code\code\projets\contextuel_popper\exe\src\URLComponentFF3\FPFF3Component\Release\FPFF3Component.pdb

xpcom

NS_CStringContainerFinish NS_CStringContainerInit NS_UTF16ToCString NS_Alloc NS_CStringCloneData NS_Free NS_GetServiceManager NS_StringContainerInit NS_StringContainerFinish

kernel32

GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GetCurrentThreadId SetErrorMode GetCurrentProcessId InterlockedIncrement GetVersion GetVersionExA lstrcmpW LoadLibraryA EnterCriticalSection GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GlobalFlags GetModuleHandleA InterlockedExchange HeapAlloc GetSystemTimeAsFileTime GetCommandLineA HeapFree GetProcessHeap HeapReAlloc RtlUnwind RaiseException HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameA VirtualFree VirtualAlloc HeapDestroy HeapCreate GetCPInfo GetACP GetOEMCP Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount SetStdHandle GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA TlsGetValue LeaveCriticalSection LocalAlloc FreeLibrary InterlockedDecrement GetModuleHandleW GetProcAddress GetModuleFileNameW GetCurrentProcess CloseHandle FlushFileBuffers SetFilePointer WriteFile LoadLibraryW GetThreadLocale GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree GetLastError SetLastError lstrlenW WideCharToMultiByte GetComputerNameW LockResource MultiByteToWideChar SizeofResource LoadResource FindResourceW

user32

SetWindowTextW ClientToScreen TabbedTextOutW DrawTextW DrawTextExW GrayStringW DestroyMenu PostQuitMessage UnregisterClassA RemovePropW IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW LoadIconW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem LoadCursorW GetDC ReleaseDC GetSysColor GetSysColorBrush GetWindowThreadProcessId GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxW UnregisterClassW SetWindowsHookExW CallNextHookEx DispatchMessageW SendMessageW GetKeyState PeekMessageW ValidateRect UnhookWindowsHookEx GetSystemMetrics GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu WinHelpW GetCapture GetClassNameW GetClassLongW SetPropW RegisterClassW GetPropW EnumWindows SendMessageTimeoutW FindWindowExW RegisterWindowMessageW GetWindowTextW

shlwapi

SHGetValueA PathFindFileNameW PathFindExtensionW

oleacc

CreateStdAccessibleObject LresultFromObject

nspr4

PR_AtomicIncrement PR_AtomicDecrement

gdi32

SetTextColor SetBkColor GetClipBox ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW DeleteObject SaveDC RestoreDC SetMapMode SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject RectVisible PtVisible CreateBitmap GetDeviceCaps TextOutW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

oleaut32

VariantClear VariantChangeType VariantInit