jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]98a4fe502559010b98c75df531b780d2

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.98a4fe502559010b98c75df531b780d2
Size 1.9MB
Sample261014-e8l4ysfw9v
SHA256 0340e65ad96f684ccc67e3da00e8e3f4f0d415b8fe820350c16407d8f77d43a5
MD5 98a4fe502559010b98c75df531b780d2
SHA1 dfbaa5a525c087d10ed9127607618d2902ea0592
SHA512 3d19fb583e7a8e79efc78e260381abe0824e7f7258f189d3a4ef615ca250fea3717cccae8d1bb074f5b83b2a61ef6a6958f14f477e9162bd1ff398f355d22ddd
SSDEEP 24576:11RXIB914+bFpS3fjCvK9o0twV9mCzBf:11RY9C+bnSvjlWFV9Zf
TLSH
T1D2958C432E538F2EDC7A8574CAB6C4BDE0B4C8E1736345E7A7814879EA485D0EAF1913
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.98a4fe502559010b98c75df531b780d2

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.98a4fe502559010b98c75df531b780d2

.exe 1.9MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.98a4fe502559010b98c75df531b780d2

IMPHASH c45b93bc19b42a4a237a2b0444134d18
SHA256 0340e65ad96f684ccc67e3da00e8e3f4f0d415b8fe820350c16407d8f77d43a5
MD5 98a4fe502559010b98c75df531b780d2
SHA1 dfbaa5a525c087d10ed9127607618d2902ea0592
SHA512 3d19fb583e7a8e79efc78e260381abe0824e7f7258f189d3a4ef615ca250fea3717cccae8d1bb074f5b83b2a61ef6a6958f14f477e9162bd1ff398f355d22ddd
SSDEEP 24576:11RXIB914+bFpS3fjCvK9o0twV9mCzBf:11RY9C+bnSvjlWFV9Zf
TLSH
T1D2958C432E538F2EDC7A8574CAB6C4BDE0B4C8E1736345E7A7814879EA485D0EAF1913
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

205691

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP SetStdHandle ReadConsoleW WriteConsoleW CreateFileW HeapSize GetModuleHandleW FreeEnvironmentStringsW VirtualProtect WideCharToMultiByte EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer MultiByteToWideChar SetLastError InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetProcAddress LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo CloseHandle SetEvent ResetEvent WaitForSingleObjectEx UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RaiseException RtlUnwind GetLastError FreeLibrary LoadLibraryExW HeapAlloc HeapReAlloc HeapFree ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle WriteFile GetACP GetFileType FlushFileBuffers GetConsoleCP GetConsoleMode ReadFile SetFilePointerEx IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap FindClose FindFirstFileExW FindNextFileW IsValidCodePage SetEndOfFile

user32

CreateWindowExW ReleaseDC AnimateWindow SetForegroundWindow AdjustWindowRectEx AdjustWindowRect AddClipboardFormatListener RegisterClassW LoadCursorW DefWindowProcW EndPaint BeginPaint SendMessageW GetDC

gdi32

CreatePalette CreateMetaFileW CreateHatchBrush CreateHalftonePalette CreateFontW ColorCorrectPalette GetStockObject CreateSolidBrush

Name

.text

Size

884KB

Virtual Size

884KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

5KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.gfids

Size

1024B

Virtual Size

964B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

927KB

Virtual Size

926KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.98a4fe502559010b98c75df531b780d2

kernel32

user32

gdi32

generic