jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]b8f64850503790e2e6ed5328f2100182

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b8f64850503790e2e6ed5328f2100182
Size 2.3MB
Sample261014-e9sm5aws4r
SHA256 9278d560614c7c8b1111f1dfb7b641391601c492bc02378938c7aed4ebff5ca5
MD5 b8f64850503790e2e6ed5328f2100182
SHA1 84dad162aaa7cac935ad3923792638dedc029f34
SHA512 48879a7378e63541fdcee86439a8022a4c2e18d81a074d544813187829c2dff1659a91b43e5ca70a3b8d18edf645688d139e9836283aedd322736926beb0932e
SSDEEP 24576:EglD6ORLE82xwRISccfk2n/cCvFrghiLALYfW9t:EMD6ywunccc+1NEhiLf0
TLSH
T1A3B502F136808D77EC1D86F5801DBD308D27FF963791594622E3ABCBC5A0DB1A4ACA61
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b8f64850503790e2e6ed5328f2100182

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b8f64850503790e2e6ed5328f2100182

.exe 2.3MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.b8f64850503790e2e6ed5328f2100182

IMPHASH b2a9b69835bf747c9e36fdffa565c881
SHA256 9278d560614c7c8b1111f1dfb7b641391601c492bc02378938c7aed4ebff5ca5
MD5 b8f64850503790e2e6ed5328f2100182
SHA1 84dad162aaa7cac935ad3923792638dedc029f34
SHA512 48879a7378e63541fdcee86439a8022a4c2e18d81a074d544813187829c2dff1659a91b43e5ca70a3b8d18edf645688d139e9836283aedd322736926beb0932e
SSDEEP 24576:EglD6ORLE82xwRISccfk2n/cCvFrghiLALYfW9t:EMD6ywunccc+1NEhiLf0
TLSH
T1A3B502F136808D77EC1D86F5801DBD308D27FF963791594622E3ABCBC5A0DB1A4ACA61
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45438

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

GetVersion GlobalLock VirtualAlloc InitializeCriticalSection WaitForSingleObject GetFileSize SetFilePointer GetSystemTimeAsFileTime FormatMessageW MapViewOfFile lstrcmpW CreateMutexW GetStartupInfoW GetCommandLineW FindNextFileW GetLocaleInfoW GetThreadLocale GetConsoleWindow CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapSize HeapReAlloc HeapAlloc GetStringTypeW OutputDebugStringW RtlUnwind LoadLibraryExW HeapFree LeaveCriticalSection EnterCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage IsDebuggerPresent GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount RaiseException IsProcessorFeaturePresent EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter CreateFileW

user32

DestroyWindow SendMessageTimeoutW DdeCmpStringHandles DdeConnect ImpersonateDdeClientWindow GetScrollBarInfo DestroyIcon FindWindowW ClientToScreen ModifyMenuW InsertMenuW DrawMenuBar GetMenu EnableWindow SendInput GetKeyboardType CheckRadioButton BeginDeferWindowPos OpenIcon

opengl32

glClearDepth glColorMask glStencilOp glStencilMask glStencilFunc glReadPixels glIsEnabled glGetString glGetIntegerv glGetError glGenTextures glFlush glEnable glDrawArrays glDisable glDepthMask glCopyTexImage2D glClearColor

winspool.drv

FindFirstPrinterChangeNotification DeleteFormW

mpr

WNetOpenEnumW