jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Agent[.]gen[.]4234561125acbe1f986e11db8d604804

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4234561125acbe1f986e11db8d604804
Size 344KB
Sample261014-elvsksft4v
SHA256 17d332396b3f95b75eb805cd816185a5c24ad9c541d62de025b22b94f38f9f1d
MD5 4234561125acbe1f986e11db8d604804
SHA1 eac10068326b41a5ffee04475d0c0632d9fb2c4a
SHA512 c35cd44add2b1588aae2a0cae0cc188ec65d4ee2d61f3adf59f0456e673bee1475405e3f394a3500775f88f124eaa3ac5855392a9ef9934eb9b08a79c6beead9
SSDEEP 6144:p/AFZ8+aH5d+UmNfBfm6HjpkJpp8iv5FLwXQldyas4mrZWeOb7Mm1/wMNQxy:p/qcd+BNfpm6HKp8WyqDedm1L
TLSH
T1C7740222BBE4849AD2AAA9726D42C2B751A0FC009395111737D4BFFF7C32751E5281BF
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

installer

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4234561125acbe1f986e11db8d604804

NSIS installer 1 IoCs

installer

resource	yara_rule
sample	nsis_installer_2

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4234561125acbe1f986e11db8d604804

.exe 344KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Agent.gen.4234561125acbe1f986e11db8d604804

IMPHASH 470282e4fe2ebbf8acb122584604aac8
SHA256 17d332396b3f95b75eb805cd816185a5c24ad9c541d62de025b22b94f38f9f1d
MD5 4234561125acbe1f986e11db8d604804
SHA1 eac10068326b41a5ffee04475d0c0632d9fb2c4a
SHA512 c35cd44add2b1588aae2a0cae0cc188ec65d4ee2d61f3adf59f0456e673bee1475405e3f394a3500775f88f124eaa3ac5855392a9ef9934eb9b08a79c6beead9
SSDEEP 6144:p/AFZ8+aH5d+UmNfBfm6HjpkJpp8iv5FLwXQldyas4mrZWeOb7Mm1/wMNQxy:p/qcd+BNfpm6HKp8WyqDedm1L
TLSH
T1C7740222BBE4849AD2AAA9726D42C2B751A0FC009395111737D4BFFF7C32751E5281BF
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.
NSIS installer

installer

Minor OS version

Major OS version

Entry point

13085

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RegisterClassA SystemParametersInfoA CreateWindowExA GetClassInfoA DialogBoxParamA SetWindowPos IsWindowEnabled SetClassLongA GetSystemMenu EnableMenuItem EndDialog GetSystemMetrics CreatePopupMenu AppendMenuA GetWindowRect SetDlgItemTextA OpenClipboard EmptyClipboard SetClipboardData CloseClipboard LoadBitmapA IsWindowVisible CallWindowProcA GetMessagePos ScreenToClient CheckDlgButton LoadCursorA SetCursor GetWindowLongA GetSysColor CharNextA GetDlgItemTextA MessageBoxIndirectA CharPrevA DispatchMessageA PeekMessageA TrackPopupMenu ExitWindowsEx DestroyWindow CreateDialogParamA SetTimer SetWindowTextA PostQuitMessage SetForegroundWindow ShowWindow wsprintfA SendMessageTimeoutA FindWindowExA IsWindow GetDlgItem SetWindowLongA LoadImageA GetDC EnableWindow InvalidateRect SendMessageA DefWindowProcA BeginPaint GetClientRect FillRect DrawTextA EndPaint

kernel32

RemoveDirectoryA GetSystemDirectoryA lstrcatA GetTempFileNameA CreateFileA CreateProcessA CreateDirectoryA GetLastError CreateThread GlobalLock GlobalUnlock GetDiskFreeSpaceA lstrcpynA SetErrorMode GetVersion lstrlenA GetCommandLineA GetTempPathA GetWindowsDirectoryA ExitProcess CopyFileA GetCurrentProcess GetModuleFileNameA GetFileSize GetTickCount Sleep SetFileAttributesA GetFileAttributesA SetCurrentDirectoryA MoveFileA GetFullPathNameA GetShortPathNameA SearchPathA CompareFileTime SetFileTime CloseHandle lstrcmpiA MulDiv DeleteFileA FindFirstFileA FindNextFileA FindClose SetFilePointer ReadFile WriteFile GetPrivateProfileStringA WritePrivateProfileStringA MultiByteToWideChar FreeLibrary GetProcAddress LoadLibraryExA GetModuleHandleA GlobalFree GetExitCodeProcess WaitForSingleObject GlobalAlloc ExpandEnvironmentStringsA lstrcmpA

shell32

SHGetSpecialFolderLocation SHBrowseForFolderA SHGetPathFromIDListA SHGetFileInfoA ShellExecuteA SHFileOperationA

advapi32

RegDeleteKeyA RegCloseKey RegEnumKeyA RegOpenKeyExA RegEnumValueA RegQueryValueExA RegSetValueExA RegCreateKeyExA RegDeleteValueA SetFileSecurityA

comctl32

ImageList_Destroy ord17 ImageList_AddMasked ImageList_Create

gdi32

SelectObject SetTextColor SetBkMode CreateFontIndirectA CreateBrushIndirect DeleteObject GetDeviceCaps SetBkColor

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

ntdll

_allshl _aulldiv _allmul _alldiv _allrem _allshr