jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Gaba[.]gen[.]e97b7eaa45fdc1718a53e7b34e801d98

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.e97b7eaa45fdc1718a53e7b34e801d98
Size 212KB
Sample261014-e2qtkafw4v
SHA256 26e75b205e277429a5e2a2d0b95544b8a4860f7af5b7f7ad64ddba2390ff5d2e
MD5 e97b7eaa45fdc1718a53e7b34e801d98
SHA1 bdee0ed7deeb59f989b4f0d59e6e7a780667b540
SHA512 0058cffb20c8f277edea7425e80da16d68072c79b7a301c70afcf7504f2d342f0d339c3532a6e5bb305cf2d770173e313de9806e3f3219b07da1c96266fae39e
SSDEEP 3072:l0nhGbMCgSZPfphYn3nzXToAN3grTX/s1fwr73hINeHt/aCJwuw5:lADCRPfphYXzk+UTU3Ma
TLSH
T1FA248D1235D6C0B7D3AB013A4597976977F9B8129FE2D58BBFD48E8C5E300C68A3A311
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.e97b7eaa45fdc1718a53e7b34e801d98

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.e97b7eaa45fdc1718a53e7b34e801d98

.dll 212KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Gaba.gen.e97b7eaa45fdc1718a53e7b34e801d98

IMPHASH e47402fd95dc736f7b9265b3be0710b8
SHA256 26e75b205e277429a5e2a2d0b95544b8a4860f7af5b7f7ad64ddba2390ff5d2e
MD5 e97b7eaa45fdc1718a53e7b34e801d98
SHA1 bdee0ed7deeb59f989b4f0d59e6e7a780667b540
SHA512 0058cffb20c8f277edea7425e80da16d68072c79b7a301c70afcf7504f2d342f0d339c3532a6e5bb305cf2d770173e313de9806e3f3219b07da1c96266fae39e
SSDEEP 3072:l0nhGbMCgSZPfphYn3nzXToAN3grTX/s1fwr73hINeHt/aCJwuw5:lADCRPfphYXzk+UTU3Ma
TLSH
T1FA248D1235D6C0B7D3AB013A4597976977F9B8129FE2D58BBFD48E8C5E300C68A3A311
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

66636

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\gabpath_work\GabPath_full_code\GabPath_full_code\code\projets\contextuel_popper\exe\src\URLComponentFF3\GPFF3Component\Release\GPFF3Component.pdb

xpcom

NS_CStringContainerFinish NS_CStringContainerInit NS_UTF16ToCString NS_Alloc NS_CStringCloneData NS_Free NS_GetServiceManager NS_StringContainerFinish NS_StringContainerInit

kernel32

GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc DeleteCriticalSection TlsFree GetCurrentThreadId SetErrorMode GetCurrentProcessId InterlockedIncrement GetVersion FileTimeToSystemTime FileTimeToLocalFileTime GetFileAttributesW GetFileTime GetVersionExA lstrcmpW LoadLibraryA EnterCriticalSection GlobalDeleteAtom GlobalFindAtomW GlobalAddAtomW GlobalFlags GetModuleHandleA InterlockedExchange CompareStringA RtlUnwind RaiseException GetSystemTimeAsFileTime HeapAlloc GetCommandLineA HeapFree GetProcessHeap HeapReAlloc HeapSize ExitProcess TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetStdHandle GetModuleFileNameA GetCPInfo GetACP GetOEMCP VirtualFree VirtualAlloc HeapDestroy HeapCreate Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount SetStdHandle GetTimeZoneInformation GetLocaleInfoA GetConsoleCP GetConsoleMode LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW CreateFileA SetEnvironmentVariableA TlsGetValue LeaveCriticalSection LocalAlloc FreeLibrary InterlockedDecrement GetModuleHandleW GetProcAddress CreateFileW GetModuleFileNameW GetFullPathNameW GetVolumeInformationW FindFirstFileW FindClose GetCurrentProcess DuplicateHandle CloseHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile LoadLibraryW GetThreadLocale WideCharToMultiByte GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageW LocalFree lstrlenW GetLastError SetLastError GetComputerNameW MultiByteToWideChar FindResourceW LoadResource LockResource SizeofResource CompareStringW

user32

SetWindowTextW ClientToScreen TabbedTextOutW DrawTextW DrawTextExW GrayStringW DestroyMenu PostQuitMessage UnregisterClassA RemovePropW IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu PostMessageW CreateWindowExW GetClassInfoExW GetClassInfoW LoadIconW AdjustWindowRectEx CopyRect PtInRect GetDlgCtrlID DefWindowProcW CallWindowProcW SetWindowLongW SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapW GetFocus ModifyMenuW EnableMenuItem CheckMenuItem GetWindowTextW LoadCursorW GetDC ReleaseDC GetSysColor GetSysColorBrush GetWindowThreadProcessId GetParent GetWindowLongW GetLastActivePopup IsWindowEnabled EnableWindow UnregisterClassW SetWindowsHookExW CallNextHookEx DispatchMessageW SendMessageW GetKeyState PeekMessageW ValidateRect UnhookWindowsHookEx CharUpperW GetSystemMetrics GetMenuState GetMenuItemID GetMenuItemCount GetSubMenu WinHelpW GetCapture GetClassNameW GetClassLongW SetPropW RegisterClassW GetPropW EnumWindows FindWindowExW SendMessageTimeoutW RegisterWindowMessageW MessageBoxW

shlwapi

SHGetValueA PathIsUNCW PathFindFileNameW PathFindExtensionW PathStripToRootW

oleacc

CreateStdAccessibleObject LresultFromObject

nspr4

PR_AtomicIncrement PR_AtomicDecrement

gdi32

SetTextColor SetBkColor GetClipBox ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutW DeleteObject SaveDC RestoreDC SetMapMode SetWindowExtEx ScaleWindowExtEx DeleteDC GetStockObject RectVisible PtVisible CreateBitmap GetDeviceCaps TextOutW

winspool.drv

ClosePrinter OpenPrinterW DocumentPropertiesW

comdlg32

GetFileTitleW

oleaut32

VariantClear VariantChangeType VariantInit