jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]bcb0ab1142f25ebe9ee6911d3f812877

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.bcb0ab1142f25ebe9ee6911d3f812877
Size 1.0MB
Sample261014-e93s4ayvht
SHA256 e47a7be5d564380713bf8658287743f36291154cbb6a49fb54373f1a97d03e03
MD5 bcb0ab1142f25ebe9ee6911d3f812877
SHA1 3d43ded457d1751fab94d34e6ad345e7bc6215a1
SHA512 507ddb980337be5897caa102316b245b160bf3fd1fdd8a52479b4027affe3b27027a554296602e3f06760371ea388d41213d8c1fc3ecfbb3fb540029226ae22e
SSDEEP 24576:DyMcumOuBUkAGY2DS/LZh7X5Jmt/71xA8x+fxrv9B6:D1cqbqSTbXTuD7A8sc
TLSH
T1F0352201B5D0A572F4B601364EFB466D953CE6201B602EEB63EC197D4F785F03A326AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.bcb0ab1142f25ebe9ee6911d3f812877

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.bcb0ab1142f25ebe9ee6911d3f812877

.exe 1.0MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.bcb0ab1142f25ebe9ee6911d3f812877

IMPHASH 952b1eacfc074823060de7ea1cedc870
SHA256 e47a7be5d564380713bf8658287743f36291154cbb6a49fb54373f1a97d03e03
MD5 bcb0ab1142f25ebe9ee6911d3f812877
SHA1 3d43ded457d1751fab94d34e6ad345e7bc6215a1
SHA512 507ddb980337be5897caa102316b245b160bf3fd1fdd8a52479b4027affe3b27027a554296602e3f06760371ea388d41213d8c1fc3ecfbb3fb540029226ae22e
SSDEEP 24576:DyMcumOuBUkAGY2DS/LZh7X5Jmt/71xA8x+fxrv9B6:D1cqbqSTbXTuD7A8sc
TLSH
T1F0352201B5D0A572F4B601364EFB466D953CE6201B602EEB63EC197D4F785F03A326AB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

41301

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

AddSecureMemoryCacheCallback CreateMemoryResourceNotification DecodePointer WriteConsoleW SetFilePointerEx GetConsoleMode GetConsoleCP GetModuleHandleW HeapReAlloc HeapSize GetProcessHeap GetStringTypeW GetFileType SetStdHandle FlushFileBuffers VirtualProtect UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW EncodePointer RaiseException GetLastError SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW CreateFileW

user32

CreateWindowExW ReleaseDC AnimateWindow SetForegroundWindow AdjustWindowRectEx AdjustWindowRect GetDC RegisterClassW LoadCursorW DefWindowProcW PostQuitMessage EndPaint BeginPaint SendMessageW

gdi32

CreateSolidBrush

Sharing