jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]97c860b955015b3ecb000506393a099f

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.97c860b955015b3ecb000506393a099f
Size 678KB
Sample261014-e8epwayvfz
SHA256 7e7320e99b77e88afcc6e2375c09b4c74d8d9d4942369543ea15331c74cc1062
MD5 97c860b955015b3ecb000506393a099f
SHA1 c95a4b883da18cbffe4be1361c44089b4b2e1a4a
SHA512 a56ce2965500fee670537ab11aaf46586f5e7c74f7ae3771df88a42aeecacfb535f0616d82ce5150d236e8c89b0c5103254c2e54613a93ce1a312a73f2a4f6e8
SSDEEP 12288:KgPfVlIyus7XDX01Gm3o0AC63QvnpXcnlUZakNc2P:KyffIyuETQn3o6IQ/Bcnlw1Nc2
TLSH
T1FBE41210F5C194B9D5728C720875DB315BBDFAAA6F614CA773494B2E0E302C1AE729B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.97c860b955015b3ecb000506393a099f

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.97c860b955015b3ecb000506393a099f

.exe 678KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.97c860b955015b3ecb000506393a099f

IMPHASH af1271f3ac9824ee0751e3eb12394f00
SHA256 7e7320e99b77e88afcc6e2375c09b4c74d8d9d4942369543ea15331c74cc1062
MD5 97c860b955015b3ecb000506393a099f
SHA1 c95a4b883da18cbffe4be1361c44089b4b2e1a4a
SHA512 a56ce2965500fee670537ab11aaf46586f5e7c74f7ae3771df88a42aeecacfb535f0616d82ce5150d236e8c89b0c5103254c2e54613a93ce1a312a73f2a4f6e8
SSDEEP 12288:KgPfVlIyus7XDX01Gm3o0AC63QvnpXcnlUZakNc2P:KyffIyuETQn3o6IQ/Bcnlw1Nc2
TLSH
T1FBE41210F5C194B9D5728C720875DB315BBDFAAA6F614CA773494B2E0E302C1AE729B3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

12435

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetApplicationRecoveryCallback GetFinalPathNameByHandleW GetModuleHandleW DecodePointer WriteConsoleW SetFilePointerEx GetConsoleMode CreateMemoryResourceNotification FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap GetStringTypeW GetFileType SetStdHandle GetConsoleCP VirtualProtect UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW EncodePointer RaiseException GetLastError SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW CreateFileW

user32

DispatchMessageW TranslateMessage GetMessageW CreateWindowExW RegisterClassW LoadCursorW DefWindowProcW PostQuitMessage EndPaint PostMessageW BeginPaint SendMessageW

gdi32

CreateSolidBrush

Sharing