jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]8ee39acc38e27064a56890a88595b46f

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.8ee39acc38e27064a56890a88595b46f
Size 2.6MB
Sample261014-e72g9aws2p
SHA256 bd161e6bc76b04f834dae39c75330ea24fa79ee3b1cd130cdfc0a4667079d9c8
MD5 8ee39acc38e27064a56890a88595b46f
SHA1 b6a5eb5ad6998a6a3b4f083e96996d176dd1d452
SHA512 28ca1a9dc84465499b777cfab850259d760dcc3480fa1d9a2ab0e8236d6fdb3340229edec93402cb557085281f57310f075db62d48127f60cd6ba7a95e56e23c
SSDEEP 12288:7NJO9KYMboBiqM9NnkYHh4dY6c8mzXCZrxztKI6tQlB9v:7NJO9KYRiV9NkYSC6c8m+TMQl
TLSH
T16CC51253B980CA34E5340E391C76C788997F7E613978AA5FAB14316E0F715D0AE25F0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.8ee39acc38e27064a56890a88595b46f

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.8ee39acc38e27064a56890a88595b46f

.exe 2.6MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.8ee39acc38e27064a56890a88595b46f

IMPHASH 42cac9a659e3413cac38f3151d637e37
SHA256 bd161e6bc76b04f834dae39c75330ea24fa79ee3b1cd130cdfc0a4667079d9c8
MD5 8ee39acc38e27064a56890a88595b46f
SHA1 b6a5eb5ad6998a6a3b4f083e96996d176dd1d452
SHA512 28ca1a9dc84465499b777cfab850259d760dcc3480fa1d9a2ab0e8236d6fdb3340229edec93402cb557085281f57310f075db62d48127f60cd6ba7a95e56e23c
SSDEEP 12288:7NJO9KYMboBiqM9NnkYHh4dY6c8mzXCZrxztKI6tQlB9v:7NJO9KYRiV9NkYSC6c8m+TMQl
TLSH
T16CC51253B980CA34E5340E391C76C788997F7E613978AA5FAB14316E0F715D0AE25F0B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5991

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FlushFileBuffers HeapReAlloc HeapSize GetConsoleCP GetStringTypeW GetModuleHandleW SetStdHandle GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer CreateFileW GetProcessHeap LCMapStringW VirtualProtect GetFileType GetTickCount UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RaiseException

user32

CreateWindowExW ReleaseDC SetForegroundWindow ActivateKeyboardLayout GetRegisteredRawInputDevices ChangeWindowMessageFilterEx GetMenuCheckMarkDimensions RegisterClassW LoadCursorW DefWindowProcW GetDC EndPaint BeginPaint SendMessageW AddClipboardFormatListener

gdi32

CreateMetaFileW CreateHatchBrush CreateHalftonePalette CreateBrushIndirect CreateBitmapIndirect GetStockObject CreatePalette

shell32

SHGetInstanceExplorer SHGetFolderLocation SHCreateItemWithParent

advapi32

CreateProcessAsUserW ConvertToAutoInheritPrivateObjectSecurity