jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Gaba[.]gen[.]ad5411b78296f06965e62ba8aeefa111

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.ad5411b78296f06965e62ba8aeefa111
Size 220KB
Sample261014-e2nzzaythx
SHA256 89201f67b1c89bf029f8dd67a5a02ffe3ba46194774d706aabc307d9bdbe9440
MD5 ad5411b78296f06965e62ba8aeefa111
SHA1 17fb89f40259865b3d7548cc40a193702253e7fd
SHA512 51aa33cd4c82a3b11dab4f4d972d5c639c4038711e239c390d343ef6a5d82e6b18deb4d159e525b7ee4519722d6fb4321c36a017c230dc3d11ade17fcdc2378d
SSDEEP 3072:KnRGbXNr7XJIMdGpxuy+MXlBX28VzZvn7wAX7GClAwr73i1Vt/25Lna:SRKdruuqxuy+KlBXvZEAX7RGH25
TLSH
T1C924AD1135C2C077E2AF027A8987C79973FDB8229FE5858BFFC49E8D5E305854A39252
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.ad5411b78296f06965e62ba8aeefa111

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.ad5411b78296f06965e62ba8aeefa111

.dll 220KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.ad5411b78296f06965e62ba8aeefa111

IMPHASH 7ccb4b7f857127076a67d3de25c55c1d
SHA256 89201f67b1c89bf029f8dd67a5a02ffe3ba46194774d706aabc307d9bdbe9440
MD5 ad5411b78296f06965e62ba8aeefa111
SHA1 17fb89f40259865b3d7548cc40a193702253e7fd
SHA512 51aa33cd4c82a3b11dab4f4d972d5c639c4038711e239c390d343ef6a5d82e6b18deb4d159e525b7ee4519722d6fb4321c36a017c230dc3d11ade17fcdc2378d
SSDEEP 3072:KnRGbXNr7XJIMdGpxuy+MXlBX28VzZvn7wAX7GClAwr73i1Vt/25Lna:SRKdruuqxuy+KlBXvZEAX7RGH25
TLSH
T1C924AD1135C2C077E2AF027A8987C79973FDB8229FE5858BFFC49E8D5E305854A39252
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

72552

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\gabpath_work\GabPath_full_code\code\projets\contextuel_popper\exe\src\URLComponentFF3\GPFF3Component\Release\GPFF3Component.pdb

xpcom

NS_CStringContainerFinish NS_CStringContainerInit NS_UTF16ToCString NS_Alloc NS_CStringCloneData NS_Free NS_StringContainerInit NS_StringContainerFinish NS_GetServiceManager

kernel32

GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GetCurrentThreadId SetErrorMode FileTimeToSystemTime InterlockedIncrement GetVersion GetCurrentProcessId FileTimeToLocalFileTime GetFileAttributesW GetFileTime GetVersionExA lstrcmpW LoadLibraryA EnterCriticalSection GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GlobalFlags GetModuleHandleA InterlockedExchange CompareStringA RtlUnwind RaiseException GetSystemTimeAsFileTime HeapAlloc GetCommandLineA HeapFree GetProcessHeap HeapReAlloc HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP VirtualFree VirtualAlloc HeapDestroy HeapCreate Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount SetStdHandle GetTimeZoneInformation GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA TlsGetValue LeaveCriticalSection LocalAlloc FreeLibrary InterlockedDecrement GetModuleHandleW GetProcAddress CreateFileW GetModuleFileNameW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile LoadLibraryW GetThreadLocale GetLastError SetLastError GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree lstrlenW WideCharToMultiByte GetComputerNameW LoadResource LockResource SizeofResource FindResourceW MultiByteToWideChar CompareStringW

user32

SetWindowTextW ClientToScreen TabbedTextOutW DrawTextW DrawTextExW GrayStringW DestroyMenu PostQuitMessage UnregisterClassA RemovePropW IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW LoadIconW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetWindowThreadProcessId GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled EnableWindow MessageBoxW LoadCursorW GetDC ReleaseDC GetSysColor GetSysColorBrush UnregisterClassW SetWindowsHookExW CallNextHookEx DispatchMessageW SendMessageW GetKeyState PeekMessageW ValidateRect UnhookWindowsHookEx CharUpperW GetSystemMetrics GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu WinHelpW GetCapture GetClassNameW GetClassLongW SetPropW RegisterClassW GetPropW FindWindowExW SendMessageTimeoutW EnumWindows RegisterWindowMessageW GetWindowTextW

shlwapi

SHGetValueA PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

oleacc

CreateStdAccessibleObject LresultFromObject

nspr4

PR_AtomicIncrement PR_AtomicDecrement

gdi32

SetTextColor SetBkColor GetClipBox ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW DeleteObject SaveDC RestoreDC SetMapMode SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject RectVisible PtVisible CreateBitmap GetDeviceCaps TextOutW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

comdlg32

GetFileTitleW

oleaut32

VariantClear VariantChangeType VariantInit