jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]1717dda4ea935fa540d30f10eb375737

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.1717dda4ea935fa540d30f10eb375737
Size 1.7MB
Sample261014-epv8hsed63
SHA256 e3bff674bf068bfbadcc18becb2037c9eb2bdd4d067f3ea24edded984c5013d5
MD5 1717dda4ea935fa540d30f10eb375737
SHA1 285ff668b1f28cc16dfc1c399bc8e052a2080b56
SHA512 4c53271accae49b87fd2420df1bf17c30d1e6663ddcfcfb919de83d9fcf8235138a846fd7b2cd33b19f9a124697a81a81457308e24efb66a39c20108016b1a5b
SSDEEP 24576:/eNY6ZGuRKuOc6SxUi5MlLJ32HeeoUkRcFJ3Sug+T+F6RibBS:/eNjQuK54HT18c7Mkit
TLSH
T15A8522006382D0F7E4A743F3989902054A797D588B3098E77BD45F9FA9B85E39A34F63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.1717dda4ea935fa540d30f10eb375737

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.1717dda4ea935fa540d30f10eb375737

.exe 1.7MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.1717dda4ea935fa540d30f10eb375737

IMPHASH f0eee55278abbf2b7cc8ed22494679d3
SHA256 e3bff674bf068bfbadcc18becb2037c9eb2bdd4d067f3ea24edded984c5013d5
MD5 1717dda4ea935fa540d30f10eb375737
SHA1 285ff668b1f28cc16dfc1c399bc8e052a2080b56
SHA512 4c53271accae49b87fd2420df1bf17c30d1e6663ddcfcfb919de83d9fcf8235138a846fd7b2cd33b19f9a124697a81a81457308e24efb66a39c20108016b1a5b
SSDEEP 24576:/eNY6ZGuRKuOc6SxUi5MlLJ32HeeoUkRcFJ3Sug+T+F6RibBS:/eNjQuK54HT18c7Mkit
TLSH
T15A8522006382D0F7E4A743F3989902054A797D588B3098E77BD45F9FA9B85E39A34F63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

90286

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

LocalAlloc LocalSize VirtualAlloc HeapAlloc InitializeCriticalSection ReleaseSemaphore WaitForMultipleObjects FormatMessageW CreateFileMappingW GetModuleHandleW GetCommandLineW CreateDirectoryW CreateTimerQueue GetConsoleWindow CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers GlobalFree LCMapStringW HeapSize HeapReAlloc GetStringTypeW OutputDebugStringW LoadLibraryExW HeapFree LeaveCriticalSection EnterCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage IsDebuggerPresent TlsFree RtlUnwind RaiseException IsProcessorFeaturePresent EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue CreateFileW

ole32

StringFromCLSID CoGetMalloc CreateStreamOnHGlobal

user32

RegisterRawInputDevices GetTitleBarInfo GetWindowInfo WinHelpW MapDialogRect IsDialogMessageW CreateIconIndirect LoadImageW LoadIconW OffsetRect GetSysColorBrush GetClientRect ValidateRgn ValidateRect SetMenuInfo TrackPopupMenu CheckMenuItem LoadMenuW IsWindowEnabled IsClipboardFormatAvailable SetDlgItemInt MoveWindow OpenIcon IsWindow AttachThreadInput SendMessageTimeoutW SendMessageW ExitWindowsEx DrawFrameControl

advapi32

RegQueryValueExW

Sharing