jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Gaba[.]gen[.]4e8831cabfc759d51a7a902abf0a953c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.4e8831cabfc759d51a7a902abf0a953c
Size 284KB
Sample261014-e2mf5sythw
SHA256 31f804af52eae57e5f8852ade275e88270104d25d15abe8b9f49e16e2028721e
MD5 4e8831cabfc759d51a7a902abf0a953c
SHA1 04b83adb5af28a3da7ea5f25a6d9afed4be520ef
SHA512 72dbe8e7dfa7bb6cf51b9aa3b630bac7162c628cfd2ea6ec84220d2e9f3d9021be806cdfd905c3baaafd1c5563468cb3d221c40c93a2fcbf05cbec62c34b34ab
SSDEEP 6144:UCvLQHzv6W26Udn9I0ke0GRWrfG4RkwuKga8WiegKif5Ma86m:JO65t8e0YT4RkwuKgaUeTif5MaM
TLSH
T182548E023FC6C072D64604774AD2965BE7BA7967BF229583BBE02E4CE9311E39D79310
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.4e8831cabfc759d51a7a902abf0a953c

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.4e8831cabfc759d51a7a902abf0a953c

.exe 284KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.4e8831cabfc759d51a7a902abf0a953c

IMPHASH 5e82db8b9b53c362bbd6f85b64064b45
SHA256 31f804af52eae57e5f8852ade275e88270104d25d15abe8b9f49e16e2028721e
MD5 4e8831cabfc759d51a7a902abf0a953c
SHA1 04b83adb5af28a3da7ea5f25a6d9afed4be520ef
SHA512 72dbe8e7dfa7bb6cf51b9aa3b630bac7162c628cfd2ea6ec84220d2e9f3d9021be806cdfd905c3baaafd1c5563468cb3d221c40c93a2fcbf05cbec62c34b34ab
SSDEEP 6144:UCvLQHzv6W26Udn9I0ke0GRWrfG4RkwuKga8WiegKif5Ma86m:JO65t8e0YT4RkwuKgaUeTif5MaM
TLSH
T182548E023FC6C072D64604774AD2965BE7BA7967BF229583BBE02E4CE9311E39D79310
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

131423

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

SHGetSpecialFolderPathA SHGetFolderPathA

shlwapi

PathIsDirectoryA PathFindExtensionA PathFindFileNameA PathGetArgsA PathAppendA PathFileExistsA SHGetValueA PathStripToRootA PathIsUNCA

iphlpapi

GetAdaptersInfo

kernel32

GlobalGetAtomNameA GetCurrentThreadId GetModuleHandleA InterlockedDecrement GetCurrentProcessId LocalAlloc LeaveCriticalSection TlsGetValue EnterCriticalSection GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree InterlockedIncrement GetFileTime lstrcmpW GlobalDeleteAtom GlobalFindAtomA GlobalAddAtomA GlobalFlags GetLocaleInfoA FileTimeToLocalFileTime GetCPInfo GetOEMCP GetCurrentDirectoryA HeapAlloc HeapFree HeapReAlloc VirtualAlloc RtlUnwind RaiseException UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetFileInformationByHandle PeekNamedPipe GetFileType GetCommandLineA GetProcessHeap GetStartupInfoA HeapSize VirtualFree HeapDestroy HeapCreate GetStdHandle GetACP GetConsoleCP GetConsoleMode SetStdHandle SetHandleCount FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetDriveTypeA LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetEnvironmentVariableA FileTimeToSystemTime FindNextFileA GetFullPathNameA FindFirstFileA FindClose DuplicateHandle GetThreadLocale GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFree GlobalAlloc GlobalLock GlobalUnlock RemoveDirectoryA Sleep CreateMutexA lstrcmpA SetLastError GetVolumeInformationA GetFileAttributesA DeleteFileA GetVersionExA GetCurrentProcess SetPriorityClass GetShortPathNameA CreateFileA DeviceIoControl WaitForSingleObject TerminateProcess OpenProcess FreeLibrary OutputDebugStringA FormatMessageA LocalFree GetSystemTime GetTimeZoneInformation GetSystemTimeAsFileTime SystemTimeToFileTime LoadLibraryA GetProcAddress ExitProcess GetTempPathA GetModuleFileNameA CopyFileA SetCurrentDirectoryA CloseHandle GetComputerNameA FindResourceA LoadResource LockResource SizeofResource lstrlenA lstrcmpiA CompareStringW CompareStringA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar InterlockedExchange

user32

DestroyMenu PostQuitMessage GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen UnregisterClassA SetWindowTextA LoadIconA WinHelpA GetCapture GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA GetWindowPlacement GetWindowRect SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus CharUpperA PostMessageA FindWindowExA ModifyMenuA EnableMenuItem CheckMenuItem LoadCursorA GetDC ReleaseDC GetSysColor GetSysColorBrush GetParent GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow UnhookWindowsHookEx SetWindowsHookExA CallNextHookEx GetWindowThreadProcessId EnumWindows SendMessageTimeoutA RegisterWindowMessageA GetWindowTextA GetWindow GetDesktopWindow FindWindowA MessageBoxA GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState GetSystemMetrics ValidateRect DispatchMessageA SendMessageA GetKeyState PeekMessageA IsIconic

gdi32

SetMapMode DeleteDC GetStockObject RestoreDC SaveDC DeleteObject SetBkColor SetTextColor GetClipBox CreateBitmap GetDeviceCaps ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

RegDeleteValueA RegSetValueExA RegDeleteKeyA InitializeSecurityDescriptor SetSecurityDescriptorDacl RegCreateKeyExA RegQueryValueExA RegOpenKeyExA RegCloseKey

ole32

StringFromIID CoGetMalloc

oleaut32

VariantClear VariantChangeType VariantInit