jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]ad2186133738a87b37adb20e86a283eb

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.ad2186133738a87b37adb20e86a283eb
Size 2.6MB
Sample261014-e889gsgs6l
SHA256 9d9d5cbe4483ed2f07ec71d647a925af0125b313456801c9fe185abdd6a67412
MD5 ad2186133738a87b37adb20e86a283eb
SHA1 aa905faffcd70e7ccf99977db2c51693436ddf67
SHA512 d696eebc35493b5d6a54caa44e527227b1cf479cec5f5345e67ea57456c28ebca9b2d561954b7a21c251fda57166ecea76ab76744a41b85d5db4457493a16cbc
SSDEEP 12288:LNyEa3kvayM2ORo6e2zAzBS1Az+ru1O9539vioHB9v:LNZa0vav2ORoZBS1y06+5tvion
TLSH
T197C51226BAD0C530F975063438B0D7AC597FBC201A68AA5FEA9075BB0F315D1AF25E13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.ad2186133738a87b37adb20e86a283eb

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.ad2186133738a87b37adb20e86a283eb

.exe 2.6MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.ad2186133738a87b37adb20e86a283eb

IMPHASH 42cac9a659e3413cac38f3151d637e37
SHA256 9d9d5cbe4483ed2f07ec71d647a925af0125b313456801c9fe185abdd6a67412
MD5 ad2186133738a87b37adb20e86a283eb
SHA1 aa905faffcd70e7ccf99977db2c51693436ddf67
SHA512 d696eebc35493b5d6a54caa44e527227b1cf479cec5f5345e67ea57456c28ebca9b2d561954b7a21c251fda57166ecea76ab76744a41b85d5db4457493a16cbc
SSDEEP 12288:LNyEa3kvayM2ORo6e2zAzBS1Az+ru1O9539vioHB9v:LNZa0vav2ORoZBS1y06+5tvion
TLSH
T197C51226BAD0C530F975063438B0D7AC597FBC201A68AA5FEA9075BB0F315D1AF25E13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5991

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FlushFileBuffers HeapReAlloc HeapSize GetConsoleCP GetStringTypeW GetModuleHandleW SetStdHandle GetConsoleMode SetFilePointerEx WriteConsoleW DecodePointer CreateFileW GetProcessHeap LCMapStringW VirtualProtect GetFileType GetTickCount UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW RaiseException

user32

CreateWindowExW ReleaseDC SetForegroundWindow ActivateKeyboardLayout GetRegisteredRawInputDevices ChangeWindowMessageFilterEx GetMenuCheckMarkDimensions RegisterClassW LoadCursorW DefWindowProcW GetDC EndPaint BeginPaint SendMessageW AddClipboardFormatListener

gdi32

CreateMetaFileW CreateHatchBrush CreateHalftonePalette CreateBrushIndirect CreateBitmapIndirect GetStockObject CreatePalette

shell32

SHGetInstanceExplorer SHGetFolderLocation SHCreateItemWithParent

advapi32

CreateProcessAsUserW ConvertToAutoInheritPrivateObjectSecurity