jaffacakes118_not-a-virus[.]Downloader[.]Win32[.]DownloAdmin[.]bupz[.]2c115fa5de9a4f53c0e1e79fb804c06d

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.Downloader.Win32.DownloAdmin.bupz.2c115fa5de9a4f53c0e1e79fb804c06d
Size 913KB
Sample261014-ecc66sfs3y
SHA256 95a2cce968f046cef12d8653a653eb508009416e05bee0541750dfa27472d84e
MD5 2c115fa5de9a4f53c0e1e79fb804c06d
SHA1 1c000d5d9f5c66f1bc62eda4cafb918c7d2c6fd6
SHA512 96e072086f016b0939a56d5b509f3142d163b481d994c718b2bef465f1c2ca61287c8602facfde6cb6754fcb0fc646e80b64a97205936a51af613fd6050bbb8c
SSDEEP 24576:u0Qi1ZDezSQzIGCOKb3Aih50eaQU5mHIRsUTSejHzPoeeMc34p8345jNpZvon22K:Rn1IOQzIGCOKb3Aih50eaQU5mHIRsUTR
TLSH
T1FD15239FFBE2FD7DFA83063150727B390809B1365B668DD79B44114A9C221C096BB78B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.Downloader.Win32.DownloAdmin.bupz.2c115fa5de9a4f53c0e1e79fb804c06d

File Explorer

jaffacakes118_not-a-virus.Downloader.Win32.DownloAdmin.bupz.2c115fa5de9a4f53c0e1e79fb804c06d

.exe 913KB

jaffacakes118_not-a-virus.Downloader.Win32.DownloAdmin.bupz.2c115fa5de9a4f53c0e1e79fb804c06d

IMPHASH 3761264be1c53c591ab8b2afd8b13867
SHA256 95a2cce968f046cef12d8653a653eb508009416e05bee0541750dfa27472d84e
MD5 2c115fa5de9a4f53c0e1e79fb804c06d
SHA1 1c000d5d9f5c66f1bc62eda4cafb918c7d2c6fd6
SHA512 96e072086f016b0939a56d5b509f3142d163b481d994c718b2bef465f1c2ca61287c8602facfde6cb6754fcb0fc646e80b64a97205936a51af613fd6050bbb8c
SSDEEP 24576:u0Qi1ZDezSQzIGCOKb3Aih50eaQU5mHIRsUTSejHzPoeeMc34p8345jNpZvon22K:Rn1IOQzIGCOKb3Aih50eaQU5mHIRsUTR
TLSH
T1FD15239FFBE2FD7DFA83063150727B390809B1365B668DD79B44114A9C221C096BB78B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

e1:63:c9:f2:b4:fa:8e:9b:8b:f5:5e:35:bb:50:8d:91:fe:41:b2:49

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=Super Click Interactive,O=Super Click Interactive,L=San Francisco,ST=California,C=US

Chains

Oct 7, 2026

CN=Super Click Interactive,O=Super Click Interactive,L=San Francisco,ST=California,C=US

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

OU=Go Daddy Class 2 Certification Authority,O=The Go Daddy Group\, Inc.,C=US

CN=Super Click Interactive,O=Super Click Interactive,L=San Francisco,ST=California,C=US

CN=Go Daddy Secure Certificate Authority - G2,OU=http://certs.godaddy.com/repository/,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

CN=Go Daddy Root Certificate Authority - G2,O=GoDaddy.com\, Inc.,L=Scottsdale,ST=Arizona,C=US

Minor OS version

Major OS version

Entry point

9717

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comdlg32

GetOpenFileNameA GetSaveFileNameA CommDlgExtendedError

gdi32

CreateBitmap AbortPath PolyPolygon FlattenPath DeleteObject EnumObjects SelectObject CreateFontIndirectA CreateFontA SelectClipPath

user32

DispatchMessageA TranslateMessage PostMessageA RegisterClassA GetWindowLongA DrawTextW EndPaint ShowWindow DrawTextA GetDC SendMessageA SendMessageW GetMessageA CreateWindowExA GetGuiResources InvertRect BeginPaint

kernel32

RtlUnwind GetSystemTimeAsFileTime InterlockedExchange Sleep InterlockedCompareExchange GetStartupInfoA UnhandledExceptionFilter SetUnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentThreadId FormatMessageA LocalFree TerminateThread GetLogicalProcessorInformation RegisterWaitForSingleObject CreateTimerQueue GetMailslotInfo SuspendThread DeleteTimerQueue GetLastError MultiByteToWideChar lstrcmpiA GetFileAttributesA GetProcAddress WaitForSingleObject ReleaseMutex CloseHandle GetFileSize MapViewOfFile CreateFileMappingA CreateFileA CreateMutexA GetVersionExA GetCurrentProcess GetVersion lstrcpynA ExitProcess GetModuleFileNameA FreeLibrary DeleteFileA SetEnvironmentVariableA DuplicateHandle GetCurrentProcessId GetEnvironmentVariableA GetExitCodeProcess TerminateProcess ResumeThread CreateProcessA GetCommandLineA LoadLibraryA FlushFileBuffers WriteFile SetCurrentDirectoryA CreateDirectoryA GetTempPathA GetModuleHandleA ReadConsoleA WriteConsoleA GetStdHandle GetCurrentDirectoryA GetFullPathNameA SetErrorMode QueueUserWorkItem HeapSize

msvcrt

realloc rand _pgmptr srand __argc __argv memmove ??0exception@@QAE@XZ ?what@exception@@UBEPBDXZ ??1exception@@UAE@XZ ??0exception@@QAE@ABV0@@Z _CxxThrowException _callnewh _ismbblead __getmainargs _cexit _exit _XcptFilter exit _acmdln _initterm _amsg_exit __setusermatherr __p__commode __p__fmode __set_app_type ??1type_info@@UAE@XZ _unlock __dllonexit _lock _onexit ?terminate@@YAXXZ _controlfp memset __CxxFrameHandler atoi _snprintf _time64 memcpy free malloc

ole32

CoInitializeEx OleInitialize CoCreateInstance CoTaskMemFree CLSIDFromProgID

shell32

SHGetPathFromIDListA SHGetDiskFreeSpaceExA ShellExecuteExA SHFileOperationA SHBrowseForFolderA SHGetInstanceExplorer

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.Downloader.Win32.DownloAdmin.bupz.2c115fa5de9a4f53c0e1e79fb804c06d

PE Signature issue

comdlg32

gdi32

user32

kernel32

msvcrt

ole32

shell32

generic