jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]4ff2d637bcedf60f89aa8ea42018100e

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.4ff2d637bcedf60f89aa8ea42018100e
Size 648KB
Sample261014-e5geasyvcy
SHA256 efd99e081e9706724c29962fbbda53e46e57e5afcc2ae15d28293b5cc56ba9b0
MD5 4ff2d637bcedf60f89aa8ea42018100e
SHA1 5cba6afde797a90087923432c17f953aedbad782
SHA512 0ae47f7d226a54e6f64e9557746c681ee53fb44099e5825c7f49e359ca41199c45e43d8133204d5dbd9ef29d6349bd2cc7d2d8a446685844ef1558c17a62923b
SSDEEP 12288:e64qqz2nU0UZ25cqCXQH3pLN6bgyTedU02lWB4vqsecIEziknSMATjrviA:t4qqcUeRJH5SDnWB4SsUWATPvr
TLSH
T106E48D21B2C1C03AE57600711A2D837BA5B9BB322B1915C3F3C09E9D29BD5E15E3A75F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.4ff2d637bcedf60f89aa8ea42018100e

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.4ff2d637bcedf60f89aa8ea42018100e

.exe 648KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.4ff2d637bcedf60f89aa8ea42018100e

IMPHASH 823ef65c3c22f080eaf9b8bc28f3794a
SHA256 efd99e081e9706724c29962fbbda53e46e57e5afcc2ae15d28293b5cc56ba9b0
MD5 4ff2d637bcedf60f89aa8ea42018100e
SHA1 5cba6afde797a90087923432c17f953aedbad782
SHA512 0ae47f7d226a54e6f64e9557746c681ee53fb44099e5825c7f49e359ca41199c45e43d8133204d5dbd9ef29d6349bd2cc7d2d8a446685844ef1558c17a62923b
SSDEEP 12288:e64qqz2nU0UZ25cqCXQH3pLN6bgyTedU02lWB4vqsecIEziknSMATjrviA:t4qqcUeRJH5SDnWB4SsUWATPvr
TLSH
T106E48D21B2C1C03AE57600711A2D837BA5B9BB322B1915C3F3C09E9D29BD5E15E3A75F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

429501

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

version

VerQueryValueA GetFileVersionInfoSizeA GetFileVersionInfoA

shlwapi

PathIsUNCA SHGetValueA PathFileExistsA PathStripToRootA PathFindExtensionA PathFindFileNameA PathRemoveExtensionA

advapi32

RegCloseKey RegSetValueExA RegQueryValueExA RegOpenKeyExA RegEnumKeyA RegQueryValueA RegCreateKeyExA SetSecurityDescriptorDacl RegOpenKeyA RegDeleteKeyA

kernel32

LockFile UnlockFile SetEndOfFile GetFileSize DuplicateHandle FindClose FindFirstFileA GetFullPathNameA GlobalGetAtomNameA CreateSemaphoreA ReleaseSemaphore InterlockedIncrement InterlockedDecrement lstrcmpW GlobalFindAtomA GetModuleFileNameW FindNextFileA FileTimeToSystemTime FileTimeToLocalFileTime TlsGetValue GlobalReAlloc GlobalHandle InitializeCriticalSection TlsAlloc TlsSetValue LocalReAlloc TlsFree WritePrivateProfileStringA GetCurrentDirectoryA GlobalFlags FlushFileBuffers GetFileAttributesA GetFileTime GetCPInfo GetOEMCP RtlUnwind GetSystemTimeAsFileTime HeapAlloc VirtualProtect VirtualAlloc GetSystemInfo VirtualQuery HeapReAlloc GetStartupInfoA ExitThread CreateThread HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent HeapDestroy HeapCreate VirtualFree GetStdHandle GetConsoleCP GetConsoleMode GetACP IsValidCodePage GetTimeZoneInformation LCMapStringA LCMapStringW SetHandleCount GetFileType FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetDriveTypeA GetStringTypeA GetStringTypeW WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle SetEnvironmentVariableA GetThreadLocale DeleteFileA GlobalAddAtomA GlobalDeleteAtom GetCurrentThread ConvertDefaultLocale EnumResourceLanguagesA GetLocaleInfoA lstrcmpA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA MulDiv CreateEventA SuspendThread SetEvent ResumeThread SetThreadPriority RaiseException LocalAlloc GetProcessHeap HeapFree SetFilePointer WriteFile ReadFile FreeResource GetCurrentProcess LocalFree CreateMutexA GetCurrentThreadId CreateToolhelp32Snapshot Process32First OpenProcess GetExitCodeProcess TerminateProcess Process32Next SetLastError Sleep GetVolumeInformationA CopyFileA GetTempFileNameA EnterCriticalSection LeaveCriticalSection ExitProcess GetModuleFileNameA GetCommandLineA DeleteCriticalSection InitializeCriticalSectionAndSpinCount GetVersionExA GetCurrentProcessId FreeLibrary GetTickCount LoadLibraryW lstrlenA lstrcmpiA CompareStringA CompareStringW MultiByteToWideChar InterlockedExchange GetVersion WideCharToMultiByte LoadResource LockResource SizeofResource FindResourceA DosDateTimeToFileTime LocalFileTimeToFileTime CompareFileTime SystemTimeToFileTime CloseHandle CreateFileA SetFileTime GetTempPathA LoadLibraryA GetProcAddress GetLastError WaitForSingleObject SetErrorMode CreateDirectoryA

user32

SetCapture ReleaseCapture CharNextA CopyAcceleratorTableA IsRectEmpty SetRect InvalidateRect InvalidateRgn GetNextDlgGroupItem MessageBeep DestroyMenu UnregisterClassA RegisterClipboardFormatA PostThreadMessageA GetSysColorBrush ShowWindow MoveWindow IsDialogMessageA LoadIconA SendDlgItemMessageA WinHelpA IsChild GetCapture GetClassLongA SetPropA GetPropA RemovePropA SetFocus GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow UpdateWindow GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect EndPaint CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowLongA GetLastActivePopup IsWindowEnabled MessageBoxA SetCursor SetMenuItemBitmaps GetMenuCheckMarkDimensions LoadBitmapA GetFocus ModifyMenuA EnableMenuItem CheckMenuItem PostQuitMessage GetMenuState GetMenuItemID GetMenuItemCount BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA GetSubMenu DrawTextA TabbedTextOutA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible SendMessageA GetKeyState PeekMessageA ValidateRect wsprintfA GetParent GetClassNameA GetSystemMetrics WaitForInputIdle EnumThreadWindows EnumChildWindows SendMessageTimeoutA GetForegroundWindow GetClientRect SetWindowTextA GetWindowThreadProcessId AttachThreadInput BringWindowToTop EnableWindow SetParent SetTimer PostMessageA RegisterWindowMessageA EnumWindows GetWindowTextA GetCursorPos CharUpperA LoadCursorA GetDC ReleaseDC GetDesktopWindow

gdi32

OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx ExtSelectClipRgn DeleteDC SetViewportOrgEx GetStockObject Escape GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode GetClipBox CreateBitmap GetDeviceCaps ExtTextOutA TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC GetObjectA SetBkColor SetTextColor SelectObject

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

oledlg

ord8

ole32

StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CoDisconnectObject CLSIDFromString CLSIDFromProgID CoTaskMemAlloc OleFlushClipboard CreateILockBytesOnHGlobal CoTaskMemFree OleRun CoInitialize CoCreateInstance OleUninitialize CoFreeUnusedLibraries CoGetMalloc CoUninitialize CoRegisterMessageFilter OleInitialize CoRevokeClassObject OleIsCurrentClipboard

oleaut32

LoadTypeLi OleCreateFontIndirect SystemTimeToVariantTime VariantTimeToSystemTime SafeArrayDestroy SysAllocStringByteLen SysStringLen SysFreeString VariantClear SysAllocString SysAllocStringLen VariantCopy VariantInit GetErrorInfo VariantChangeType

ws2_32

WSAStartup