jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]467491c5d5e2fd51dd3085e2a7d3198d

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.467491c5d5e2fd51dd3085e2a7d3198d
Size 1.9MB
Sample261014-e4rtmsfw6x
SHA256 5157c131ac4f8254add29e379038a768c326fdf12389b8247c6bd98aabde4ed9
MD5 467491c5d5e2fd51dd3085e2a7d3198d
SHA1 ce86f41cf60b6ddcf59137d614cf9fbeb94a133d
SHA512 29a41f3b069cf80996bd344420671ec04f7e4bdc4b03d5de6869b63516db6cdbe86a355711b4bbf090cd43768d666046f48a329671d71faa3585398f4922b2fe
SSDEEP 12288:PbhcGfq3bPVWRXIB9EcJw4Jmn8VSHdOkfyBRpL7CPjyFkHzXq9v5I/GBomQZzZnf:T1RXIB9E848VOq1vmpqB5WdmCzBf
TLSH
T148958C832E538F2EDC7A8578CAB6C4BDE0B4D8D1736345E7A7814879DA485C0EAF1913
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.467491c5d5e2fd51dd3085e2a7d3198d

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.467491c5d5e2fd51dd3085e2a7d3198d

.exe 1.9MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.467491c5d5e2fd51dd3085e2a7d3198d

IMPHASH c45b93bc19b42a4a237a2b0444134d18
SHA256 5157c131ac4f8254add29e379038a768c326fdf12389b8247c6bd98aabde4ed9
MD5 467491c5d5e2fd51dd3085e2a7d3198d
SHA1 ce86f41cf60b6ddcf59137d614cf9fbeb94a133d
SHA512 29a41f3b069cf80996bd344420671ec04f7e4bdc4b03d5de6869b63516db6cdbe86a355711b4bbf090cd43768d666046f48a329671d71faa3585398f4922b2fe
SSDEEP 12288:PbhcGfq3bPVWRXIB9EcJw4Jmn8VSHdOkfyBRpL7CPjyFkHzXq9v5I/GBomQZzZnf:T1RXIB9E848VOq1vmpqB5WdmCzBf
TLSH
T148958C832E538F2EDC7A8578CAB6C4BDE0B4D8D1736345E7A7814879DA485C0EAF1913
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

205691

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP SetStdHandle ReadConsoleW WriteConsoleW CreateFileW HeapSize GetModuleHandleW FreeEnvironmentStringsW VirtualProtect WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetACP GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage SetEndOfFile

user32

CreateWindowExW ReleaseDC AnimateWindow SetForegroundWindow AdjustWindowRectEx AdjustWindowRect AddClipboardFormatListener RegisterClassW LoadCursorW DefWindowProcW EndPaint BeginPaint SendMessageW GetDC

gdi32

CreatePalette CreateMetaFileW CreateHatchBrush CreateHalftonePalette CreateFontW ColorCorrectPalette GetStockObject CreateSolidBrush

Name

.text

Size

884KB

Virtual Size

884KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

964B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

927KB

Virtual Size

926KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.467491c5d5e2fd51dd3085e2a7d3198d

kernel32

user32

gdi32

generic