jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]9714f7ca3b0cd2c624c064222e729519

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.9714f7ca3b0cd2c624c064222e729519
Size 1.3MB
Sample261014-e8ae6aws3n
SHA256 159268d176d00c60ea6f0a1087807c05205803e1a9fc9481e5609cae6e386332
MD5 9714f7ca3b0cd2c624c064222e729519
SHA1 d8c434a35db6cfb0198c7f6202b288c58e93af32
SHA512 f586c21b56ad807b85cb579004bf2a9dda834470d5ddeeabe947b9dda0681912f24809fdba032eb369b6f7c15a42b22b8e7cc5583cde628bb644835bd8da9f2e
SSDEEP 12288:JGtHspgvI02FBKKSs0KKwV2CJx3EXRIO79pu:JGtHNEYKSZKPqXRIO5
TLSH
T1F955AD713DFA8D69D7612B3A1CE8469C682FE9798F130CDF6A5C432D49AC9D00832797
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.9714f7ca3b0cd2c624c064222e729519

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.9714f7ca3b0cd2c624c064222e729519

.exe 1.3MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.9714f7ca3b0cd2c624c064222e729519

IMPHASH 1e5c3816b0c8cc785fad4e974a62dcab
SHA256 159268d176d00c60ea6f0a1087807c05205803e1a9fc9481e5609cae6e386332
MD5 9714f7ca3b0cd2c624c064222e729519
SHA1 d8c434a35db6cfb0198c7f6202b288c58e93af32
SHA512 f586c21b56ad807b85cb579004bf2a9dda834470d5ddeeabe947b9dda0681912f24809fdba032eb369b6f7c15a42b22b8e7cc5583cde628bb644835bd8da9f2e
SSDEEP 12288:JGtHspgvI02FBKKSs0KKwV2CJx3EXRIO79pu:JGtHNEYKSZKPqXRIO5
TLSH
T1F955AD713DFA8D69D7612B3A1CE8469C682FE9798F130CDF6A5C432D49AC9D00832797
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

34639

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

D:\AllMyProjects\Cryptor\build\vc14-x86\bin\Release\TemplatelExeFile.pdb

kernel32

LoadLibraryA GetProcAddress GetModuleHandleW HeapAlloc CloseHandle CreateEventA InitializeCriticalSectionAndSpinCount GetLastError HeapFree RaiseException DecodePointer DeleteCriticalSection WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP FlushFileBuffers SetEvent GetProcessHeap GetStringTypeW SetStdHandle GetSystemTimeAsFileTime OpenEventA WaitForSingleObjectEx ReleaseSemaphore GetCurrentProcessId GetCurrentThreadId ResetEvent ResumeThread TlsAlloc TlsGetValue TlsSetValue TlsFree LocalFree FormatMessageA IsDebuggerPresent OutputDebugStringW EnterCriticalSection LeaveCriticalSection CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetStartupInfoW QueryPerformanceCounter InitializeSListHead EncodePointer RtlUnwind FreeLibrary LoadLibraryExW SetLastError CreateThread ExitThread FreeLibraryAndExitThread GetModuleHandleExW ExitProcess GetModuleFileNameA MultiByteToWideChar WideCharToMultiByte GetStdHandle WriteFile GetACP LCMapStringW HeapSize HeapReAlloc FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType CreateFileW

user32

MessageBoxA ReleaseDC GetDC

gdi32

GetStockObject

shell32

SHGetFolderPathW SHBindToParent

Name

.text

Size

80KB

Virtual Size

79KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

34KB

Virtual Size

33KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

512B

Virtual Size

240B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

10KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.c00

Size

103KB

Virtual Size

103KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tmp

Size

1.0MB

Virtual Size

1.0MB

Characteristics

IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.9714f7ca3b0cd2c624c064222e729519

kernel32

user32

gdi32

shell32

generic