jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]470f84a93efdccf41aeb9e6382a6c344

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.470f84a93efdccf41aeb9e6382a6c344
Size 1.5MB
Sample261014-e41fsayvby
SHA256 42a8252c80dfdae723694a0ac466115afa49f3f1c209cfd00f286152aff9bf57
MD5 470f84a93efdccf41aeb9e6382a6c344
SHA1 9ccee4a112a772168d8f753d3d846e492abf2a14
SHA512 1e86b6094583c3440272223b5e60e3500621e50994d92a8dfa6c08ce9d19262d73b2b280932bed020466937e0fbacd7952e469cf4813f0ce92e949c8a9ebb476
SSDEEP 24576:GegFU5vW5uujE8Kmco6F289MrCjH8MapGO/4v0xG:G3+xW5ud8Kmdc28arM8PGp
TLSH
T1F875D032F28085BEF1FE46730AF4A5EA453334B2CC82156F33A52559DE25C9D9B2E643
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.470f84a93efdccf41aeb9e6382a6c344

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.470f84a93efdccf41aeb9e6382a6c344

.exe 1.5MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.470f84a93efdccf41aeb9e6382a6c344

IMPHASH 2c0cf0e95942b9d9cfb9b51371d1e8b3
SHA256 42a8252c80dfdae723694a0ac466115afa49f3f1c209cfd00f286152aff9bf57
MD5 470f84a93efdccf41aeb9e6382a6c344
SHA1 9ccee4a112a772168d8f753d3d846e492abf2a14
SHA512 1e86b6094583c3440272223b5e60e3500621e50994d92a8dfa6c08ce9d19262d73b2b280932bed020466937e0fbacd7952e469cf4813f0ce92e949c8a9ebb476
SSDEEP 24576:GegFU5vW5uujE8Kmco6F289MrCjH8MapGO/4v0xG:G3+xW5ud8Kmdc28arM8PGp
TLSH
T1F875D032F28085BEF1FE46730AF4A5EA453334B2CC82156F33A52559DE25C9D9B2E643
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

125410

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualAlloc CreateFileW HeapSize ReadConsoleW GetProcessHeap SetStdHandle FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP GetACP WideCharToMultiByte GetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetModuleHandleW GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind RaiseException FreeLibrary LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW ExitProcess GetModuleHandleExW HeapFree IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc GetFileType CloseHandle FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx HeapReAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage WriteConsoleW

user32

GetWindowModuleFileNameW

shell32

ord98 DragFinish DoEnvironmentSubstW Shell_GetCachedImageIndexW ord167 ord90

ole32

OleInitialize

Sharing