jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]096ef9f81a4dc8cb7c74a7404f69cfcb

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.096ef9f81a4dc8cb7c74a7404f69cfcb
Size 2.5MB
Sample261014-en7vxsyscz
SHA256 6dea441ff9a1923abcf4ee7e8e726fcb08fba78f0110a230f605ddba58b7d80b
MD5 096ef9f81a4dc8cb7c74a7404f69cfcb
SHA1 48cb71398b85ec027a27a0781fb6c9647ee400fe
SHA512 726a4b818ff8a90d3eb79f7f2fd5bd327431d8bd210a674f40cc3731310b99459e0d20bef3f25eb8e5833536472254820d417404786f994ae1e554df53640db1
SSDEEP 24576:EbyGd6Zvw+EpkD3mRVOFjX4vgOcNzQ5nsKoVv9ibOJxwrHV1xhQC:E4kpn6jGttsKMHOD
TLSH
T1D0C53319AA8F0364C4DA0F7E10EDE8EAC5257B3706841B5B7AC68C3C6B526A4C775E43
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.096ef9f81a4dc8cb7c74a7404f69cfcb

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.096ef9f81a4dc8cb7c74a7404f69cfcb

.exe 2.5MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.096ef9f81a4dc8cb7c74a7404f69cfcb

IMPHASH 4df2687b76b7f928b650f494224037e7
SHA256 6dea441ff9a1923abcf4ee7e8e726fcb08fba78f0110a230f605ddba58b7d80b
MD5 096ef9f81a4dc8cb7c74a7404f69cfcb
SHA1 48cb71398b85ec027a27a0781fb6c9647ee400fe
SHA512 726a4b818ff8a90d3eb79f7f2fd5bd327431d8bd210a674f40cc3731310b99459e0d20bef3f25eb8e5833536472254820d417404786f994ae1e554df53640db1
SSDEEP 24576:EbyGd6Zvw+EpkD3mRVOFjX4vgOcNzQ5nsKoVv9ibOJxwrHV1xhQC:E4kpn6jGttsKMHOD
TLSH
T1D0C53319AA8F0364C4DA0F7E10EDE8EAC5257B3706841B5B7AC68C3C6B526A4C775E43
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

1654416

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegDeleteKeyW RegEnumKeyExW RegQueryValueExW RegCloseKey

setupapi

SetupGetFieldCount SetupOpenInfFileW SetupCloseInfFile SetupDiOpenDeviceInfoW CM_Locate_DevNodeW CM_Get_Parent CM_Get_DevNode_Registry_Property_ExW CM_Get_Device_ID_ExW SetupDiGetActualSectionToInstallW SetupDiSetClassInstallParamsW SetupDiSetDeviceRegistryPropertyW SetupDiOpenDevRegKey SetupDiGetClassDevsExW SetupDiGetDriverInfoDetailW SetupDiEnumDriverInfoW SetupDiBuildDriverInfoList SetupDiGetDeviceInterfaceDetailW SetupDiOpenDeviceInterfaceW SetupDiGetDeviceInfoListDetailW

wininet

InternetConnectW InternetCrackUrlW

kernel32

GetEnvironmentStrings InterlockedIncrement InterlockedDecrement GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA MultiByteToWideChar LoadLibraryA LocalAlloc LocalFree VirtualAlloc GetCurrentThreadId GetLastError WaitForMultipleObjects FindClose CloseHandle GetSystemTimeAsFileTime FileTimeToLocalFileTime lstrcmpiW GetStartupInfoW OutputDebugStringW GetFullPathNameW DeleteFileW FindNextFileW QueryPerformanceCounter GetOEMCP WideCharToMultiByte GetUserDefaultLCID GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion ExitProcess TerminateProcess GetCurrentProcess GetProcAddress GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW UnhandledExceptionFilter GetEnvironmentStringsW SetHandleCount GetStdHandle GetFileType TlsSetValue TlsAlloc SetLastError TlsGetValue GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree HeapFree RtlUnwind WriteFile InitializeCriticalSection EnterCriticalSection LeaveCriticalSection GetCPInfo GetACP HeapAlloc HeapReAlloc

comdlg32

ChooseColorW GetFileTitleW