jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]0a7ba334ed09a2f76eb316bd0bdd9b48

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.0a7ba334ed09a2f76eb316bd0bdd9b48
Size 2.7MB
Sample261014-epbtwaysdz
SHA256 de76e0232d5b20b90ebab25433b6ab18354abc948f76afd92e56e436e92a6cf4
MD5 0a7ba334ed09a2f76eb316bd0bdd9b48
SHA1 940ee8185afa1109f6fe43f36b1329ae0314e56b
SHA512 beccf1568caff4a6fadeca65f1aa3095b96d356fb6f3b0897c397fc2af9484b49de5cab4a40b14d115ba0ec7e3fad639f51218996f078e30107768ee52759d5a
SSDEEP 24576:QDWSN+2RSlHQWlt3i6HsvOzPMeU9esm3nTs/9AjnSsFsk4:E+rHQ8dMwRsOSsFsk
TLSH
T1B4D5337AD090857BF5CEB27B3EE074856141BB306E1A06AD2B820677BCAF153E944397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.0a7ba334ed09a2f76eb316bd0bdd9b48

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.0a7ba334ed09a2f76eb316bd0bdd9b48

.exe 2.7MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.0a7ba334ed09a2f76eb316bd0bdd9b48

IMPHASH c48a4c20caca1c4ed98fe27ca04fdced
SHA256 de76e0232d5b20b90ebab25433b6ab18354abc948f76afd92e56e436e92a6cf4
MD5 0a7ba334ed09a2f76eb316bd0bdd9b48
SHA1 940ee8185afa1109f6fe43f36b1329ae0314e56b
SHA512 beccf1568caff4a6fadeca65f1aa3095b96d356fb6f3b0897c397fc2af9484b49de5cab4a40b14d115ba0ec7e3fad639f51218996f078e30107768ee52759d5a
SSDEEP 24576:QDWSN+2RSlHQWlt3i6HsvOzPMeU9esm3nTs/9AjnSsFsk4:E+rHQ8dMwRsOSsFsk
TLSH
T1B4D5337AD090857BF5CEB27B3EE074856141BB306E1A06AD2B820677BCAF153E944397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

10

Major OS version

5

Entry point

1414232

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

msvcrt

_exit _controlfp _except_handler3 __set_app_type __p__fmode __p__commode _adjust_fdiv __setusermatherr _initterm __getmainargs _acmdln exit _XcptFilter

advapi32

RegEnumKeyExW

user32

DrawFrameControl GetClassInfoW ShowOwnedPopups DialogBoxParamW GetDlgItem GetWindow FindWindowExW PtInRect GetSysColor WindowFromPoint HideCaret MessageBeep GetWindowDC GetMenuState GetKeyboardType

wininet

InternetConnectW HttpOpenRequestW HttpSendRequestW HttpQueryInfoW InternetOpenW

shell32

ExtractIconExW DragQueryFileW

kernel32

EnterCriticalSection InitializeCriticalSection GetLastError GetCurrentThreadId GetCurrentProcessId GetCurrentProcess LeaveCriticalSection GetProcAddress SetHandleCount WriteFile SetEndOfFile FindClose CloseHandle GetSystemTime VirtualAlloc GetStartupInfoA GetModuleHandleA LCMapStringW WideCharToMultiByte GetCPInfo IsValidCodePage QueryPerformanceCounter FindNextFileW GetSystemDirectoryW OutputDebugStringW GetModuleHandleW GetModuleFileNameW LoadLibraryExW CreateEventW CreateMutexW TlsAlloc lstrlenW FormatMessageW DeleteCriticalSection

Sharing