jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]46e3e14dc377d2d44bea154747259021

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.46e3e14dc377d2d44bea154747259021
Size 159KB
Sample261014-e4tm8syvbv
SHA256 6f0982d972985a3110f53a832bb1f807ccfc425ee0adeaf92302e785c9365db6
MD5 46e3e14dc377d2d44bea154747259021
SHA1 35e3c36fbc1bd8bb1a75d88d20620893074af556
SHA512 8a107866e189c98789e4ef4d9f7fda53fe39eeb174843c5468b0426f176ffb5cda39c9de0f79264e71b46f383e9c670ebb66c55487bc6b909f79e4c7c26aa33b
SSDEEP 3072:lpRje4/l7iuDECuTka0U/HFMfJbHdCLVZi2dg66J8MYYXlf6fEHi9i:BjRjXuv0U/lqJdCLVb261xsZeEHl
TLSH
T1A8F312C95671B5CDEE930C39E68E62B7ADE93A774490086376D04D3A1F7C3A21D29F02
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.46e3e14dc377d2d44bea154747259021

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.46e3e14dc377d2d44bea154747259021

.dll 159KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.46e3e14dc377d2d44bea154747259021

IMPHASH 7363b70c3f3ec29ddc4e8696ede2126f
SHA256 6f0982d972985a3110f53a832bb1f807ccfc425ee0adeaf92302e785c9365db6
MD5 46e3e14dc377d2d44bea154747259021
SHA1 35e3c36fbc1bd8bb1a75d88d20620893074af556
SHA512 8a107866e189c98789e4ef4d9f7fda53fe39eeb174843c5468b0426f176ffb5cda39c9de0f79264e71b46f383e9c670ebb66c55487bc6b909f79e4c7c26aa33b
SSDEEP 3072:lpRje4/l7iuDECuTka0U/HFMfJbHdCLVZi2dg66J8MYYXlf6fEHi9i:BjRjXuv0U/lqJdCLVb261xsZeEHl
TLSH
T1A8F312C95671B5CDEE930C39E68E62B7ADE93A774490086376D04D3A1F7C3A21D29F02
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

14314

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

FreeLibrary MultiByteToWideChar SizeofResource LoadResource FindResourceA LoadLibraryExA SetThreadLocale GetModuleFileNameA InitializeCriticalSection DeleteCriticalSection InterlockedIncrement InterlockedDecrement lstrcmpiA GetModuleHandleA GetProcAddress GetLastError LeaveCriticalSection EnterCriticalSection RaiseException GetThreadLocale lstrlenA GetLocaleInfoA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA LoadLibraryA HeapAlloc HeapFree RtlUnwind GetCurrentThreadId GetCommandLineA VirtualFree VirtualAlloc VirtualProtect HeapReAlloc HeapCreate HeapDestroy Sleep ExitProcess WriteFile GetStdHandle GetModuleFileNameA TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree SetLastError HeapSize GetCPInfo GetACP GetOEMCP IsValidCodePage SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings GetVolumeInformationW FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetProcessHeap GetCurrentThread GetThreadTimes CreateThread SetThreadPriority WaitForSingleObject CloseHandle CreateFileA DisableThreadLibraryCalls

user32

CharNextW MessageBoxA

advapi32

RegQueryInfoKeyW RegSetValueExW RegOpenKeyExW RegCreateKeyExW RegCloseKey RegDeleteValueW RegDeleteKeyW RegEnumKeyExW CryptAcquireContextA CryptCreateHash CryptHashData CryptGetHashParam CryptDestroyHash CryptReleaseContext

ole32

CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree StringFromGUID2 CoCreateInstance

Sharing