jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]26aaeeb722f6b8ba7eb80629ef34531f

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.26aaeeb722f6b8ba7eb80629ef34531f
Size 1.4MB
Sample261014-e38qrsv16j
SHA256 1aab3ba241c7086d01b179cb08b43fc9e0d889a708ac45a0f08f4e5603d29b30
MD5 26aaeeb722f6b8ba7eb80629ef34531f
SHA1 fd5a1c5ecd3180f765364aef7a2e2970fa4c6652
SHA512 c9b84609ac22205e8c16c7fc6790bc1d142331614a0d776931dfe7687c1d5e4aa9a2a8b0dc34d9cb5ab7a0a0a9e06c406673e751cd5f358c8c438c5b132a16f2
SSDEEP 12288:dnrqso8KuHSRPv0mOwCulPpblz9uR//Hcr7wmTQlOVetVi:dnrqD8KuHgnxzPpppuR//HcrQkeH
TLSH
T1D6651246B0C1C872E1774E356874D5D09939FA630E558D6B73840BA96F383C09A39FBE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.26aaeeb722f6b8ba7eb80629ef34531f

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.26aaeeb722f6b8ba7eb80629ef34531f

.exe 1.4MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.26aaeeb722f6b8ba7eb80629ef34531f

IMPHASH 853b11f055da61a65ab1c44c16875811
SHA256 1aab3ba241c7086d01b179cb08b43fc9e0d889a708ac45a0f08f4e5603d29b30
MD5 26aaeeb722f6b8ba7eb80629ef34531f
SHA1 fd5a1c5ecd3180f765364aef7a2e2970fa4c6652
SHA512 c9b84609ac22205e8c16c7fc6790bc1d142331614a0d776931dfe7687c1d5e4aa9a2a8b0dc34d9cb5ab7a0a0a9e06c406673e751cd5f358c8c438c5b132a16f2
SSDEEP 12288:dnrqso8KuHSRPv0mOwCulPpblz9uR//Hcr7wmTQlOVetVi:dnrqD8KuHgnxzPpppuR//HcrQkeH
TLSH
T1D6651246B0C1C872E1774E356874D5D09939FA630E558D6B73840BA96F383C09A39FBE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

5321

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetModuleHandleW GetFileInformationByHandle SetFileInformationByHandle AddSecureMemoryCacheCallback CreateMemoryResourceNotification VirtualProtect CreateFileW DecodePointer WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap RaiseException

user32

AddClipboardFormatListener ChangeWindowMessageFilterEx CalculatePopupWindowPosition GetWindowModuleFileNameW

shell32

SetCurrentProcessExplicitAppUserModelID ord709 SHLoadNonloadedIconOverlayIdentifiers Shell_GetCachedImageIndexW SHAssocEnumHandlersForProtocolByApplication

Sharing