jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]b072ee9641c07787fb2c95b3f9728028

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b072ee9641c07787fb2c95b3f9728028
Size 1.2MB
Sample261014-e9e22ayvgw
SHA256 121fa1908944d2d167831cb278664f56df1fc4b250e626724398458e13b070d5
MD5 b072ee9641c07787fb2c95b3f9728028
SHA1 72197ffc32774873bbacd8701edb6e349519ef32
SHA512 882cbf98f9ab01c312a5d445283256e88afea634f89ab3ebdf1dadea985facb869d48301dcff655812c156e8c597ba1e767fc070932ab3ea16dd5e7ef55b6dd8
SSDEEP 24576:WOnXC80D9SseU2IzTsrnncKM4L3yw/bITw/oAB89YUFdduD5hqOGjvlq:tS8m97eUpPsDncKRAXAu1dq8v
TLSH
T139552361B4C18871D96A0531DC60CA3C453DFF300BA6AFE7339A0A5B6EDD0C26D76A79
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b072ee9641c07787fb2c95b3f9728028

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b072ee9641c07787fb2c95b3f9728028

.exe 1.2MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b072ee9641c07787fb2c95b3f9728028

IMPHASH 4a3c7cb05ec5e4173b320c0014396927
SHA256 121fa1908944d2d167831cb278664f56df1fc4b250e626724398458e13b070d5
MD5 b072ee9641c07787fb2c95b3f9728028
SHA1 72197ffc32774873bbacd8701edb6e349519ef32
SHA512 882cbf98f9ab01c312a5d445283256e88afea634f89ab3ebdf1dadea985facb869d48301dcff655812c156e8c597ba1e767fc070932ab3ea16dd5e7ef55b6dd8
SSDEEP 24576:WOnXC80D9SseU2IzTsrnncKM4L3yw/bITw/oAB89YUFdduD5hqOGjvlq:tS8m97eUpPsDncKRAXAu1dq8v
TLSH
T139552361B4C18871D96A0531DC60CA3C453DFF300BA6AFE7339A0A5B6EDD0C26D76A79
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

26506

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetFileInformationByHandle SetFileInformationByHandle CreateMemoryResourceNotification GetApplicationRecoveryCallback GetFinalPathNameByHandleW DecodePointer WriteConsoleW GetModuleHandleW GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize GetProcessHeap GetStringTypeW SetFilePointerEx VirtualProtect UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW EncodePointer RaiseException GetLastError SetLastError RtlUnwind EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType CreateFileW

user32

TranslateMessage PeekMessageW CreateWindowExW RegisterClassW LoadCursorW DefWindowProcW PostQuitMessage EndPaint BeginPaint SendMessageW

gdi32

CreateSolidBrush

Sharing