jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Agent[.]gen[.]4151016bd830043b84c7e64f12638243

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4151016bd830043b84c7e64f12638243
Size 519KB
Sample261014-elsyzsfy9n
SHA256 1e49ef8767e2b16dfb16b375fb190188c4d4547890b76b75c10ea9dca70c9c74
MD5 4151016bd830043b84c7e64f12638243
SHA1 109ff3e246a0e729fc006f6a0deaea3bae28dc11
SHA512 78d13df15465c6e1fb056c03f9c5ed197597c55c43456bbbf54e068375a9fc009ab7336ad19136cfddc58b76912eb4a39db65e02d392db033a3f630bf0f8be2a
SSDEEP 12288:p/qcd+BNfpm6HKp8WyqDedm1HSUQb/molwPoc1HvAQ7X:p/Hd+Bpp+SWyqDaInQVkocpH
TLSH
T1FAB412227BA44466D2A9AA722D55C2B611D0FC00E3D9292737C47FFFBC32755E1281BB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4151016bd830043b84c7e64f12638243

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4151016bd830043b84c7e64f12638243

.exe 519KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4151016bd830043b84c7e64f12638243

IMPHASH 470282e4fe2ebbf8acb122584604aac8
SHA256 1e49ef8767e2b16dfb16b375fb190188c4d4547890b76b75c10ea9dca70c9c74
MD5 4151016bd830043b84c7e64f12638243
SHA1 109ff3e246a0e729fc006f6a0deaea3bae28dc11
SHA512 78d13df15465c6e1fb056c03f9c5ed197597c55c43456bbbf54e068375a9fc009ab7336ad19136cfddc58b76912eb4a39db65e02d392db033a3f630bf0f8be2a
SSDEEP 12288:p/qcd+BNfpm6HKp8WyqDedm1HSUQb/molwPoc1HvAQ7X:p/Hd+Bpp+SWyqDaInQVkocpH
TLSH
T1FAB412227BA44466D2A9AA722D55C2B611D0FC00E3D9292737C47FFFBC32755E1281BB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

13085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA SetWindowPos IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem EndDialog GetSystemMetrics CreatePopupMenu AppendMenuA GetWindowRect SetDlgItemTextA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard LoadBitmapA IsWindowVisible CallWindowProcA GetMessagePos ScreenToClient CheckDlgButton LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA TrackPopupMenu ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint

kernel32

RemoveDirectoryA GetSystemDirectoryA lstrcatA GetTempFileNameA CreateFileA CreateProcessA CreateDirectoryA GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersion lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA ExitProcess CopyFileA GetCurrentProcess GetModuleFileNameA GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA MulDiv DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryExA GetModuleHandleA GlobalFree GetExitCodeProcess WaitForSingleObject GlobalAlloc ExpandEnvironmentStringsA lstrcmpA

shell32

SHGetSpecialFolderLocation SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA RegCloseKey RegEnumKeyA RegOpenKeyExA RegEnumValueA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegDeleteValueA SetFileSecurityA

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

ntdll

_allshl _aulldiv _allmul _alldiv _allrem _allshr