jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]3e93c11735886e8406851fb21c885447

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.3e93c11735886e8406851fb21c885447
Size 2.1MB
Sample261014-esm2bayshs
SHA256 165bd612098be57e693a9a2d3b1125e4bfec471ac73c0e9700e73ec14494b721
MD5 3e93c11735886e8406851fb21c885447
SHA1 b303ba074785097f1494cd9ef2f92fbf7d1ae8b1
SHA512 81fb06cc28b81957f57e4cbe8735c47f7e32a39a2efc60d3d0f2a12799950f204792f6ac1553da24cae4937d48035a2acd7ee2e468da04b6a69548b2c71c51d2
SSDEEP 24576:vZ9go0ccEkvVktgVNF1w5KtJ+bZAHhpIFvueMl:vLgoqDGtgdr/BHhIvue8
TLSH
T182A501B161A1E886F5BB89F1E6E6532014E43DAC96F204DFB3DC1B3F0271292591DE36
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.3e93c11735886e8406851fb21c885447

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.3e93c11735886e8406851fb21c885447

.exe 2.1MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.3e93c11735886e8406851fb21c885447

IMPHASH e55e474f507f375d28dda6b8eb55422c
SHA256 165bd612098be57e693a9a2d3b1125e4bfec471ac73c0e9700e73ec14494b721
MD5 3e93c11735886e8406851fb21c885447
SHA1 b303ba074785097f1494cd9ef2f92fbf7d1ae8b1
SHA512 81fb06cc28b81957f57e4cbe8735c47f7e32a39a2efc60d3d0f2a12799950f204792f6ac1553da24cae4937d48035a2acd7ee2e468da04b6a69548b2c71c51d2
SSDEEP 24576:vZ9go0ccEkvVktgVNF1w5KtJ+bZAHhpIFvueMl:vLgoqDGtgdr/BHhIvue8
TLSH
T182A501B161A1E886F5BB89F1E6E6532014E43DAC96F204DFB3DC1B3F0271292591DE36
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

74295

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

opengl32

glViewport glTexSubImage2D glTexParameteri glTexImage2D glStencilOp glStencilFunc glReadPixels glGetIntegerv glGetError glDrawElements glDepthMask glDepthFunc glCopyTexImage2D glColorMask glClearDepth glBindTexture

user32

RedrawWindow DispatchMessageW GetClassInfoW CreateWindowExW GetAncestor GetMonitorInfoW CreateIcon LoadIconW FindWindowW SetParent GetWindowLongW CopyRect FillRect DestroyCaret MessageBeep MessageBoxW EnableScrollBar ShowScrollBar SetWindowPlacement TrackPopupMenuEx GetMenuItemID GetSubMenu ToAsciiEx GetActiveWindow CharUpperW SendDlgItemMessageW CheckDlgButton BringWindowToTop IsIconic RegisterWindowMessageW

advapi32

RegEnumValueW RegDeleteValueW RegDeleteKeyW RegSetValueExW

winspool.drv

FindClosePrinterChangeNotification AddMonitorW EnumJobsW

kernel32

GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW GetEnvironmentStringsW GetSystemTimeAsFileTime GetCurrentProcessId QueryPerformanceCounter WriteFile CreateFileW WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers TerminateProcess LCMapStringW HeapSize HeapAlloc GetStringTypeW RtlUnwind LoadLibraryExW HeapFree LeaveCriticalSection EnterCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage TlsAlloc TlsGetValue TlsSetValue GetCommandLineW IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW GlobalLock VirtualAlloc HeapDestroy HeapReAlloc GetCurrentThreadId SetFileTime CloseHandle SetupComm GetSystemTime TlsFree GetModuleFileNameW OutputDebugStringW GetDriveTypeW CreateDirectoryW GetFullPathNameW GetThreadLocale GetConsoleWindow GetStartupInfoW RaiseException EncodePointer GetLastError SetLastError DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection

uxtheme

IsThemeBackgroundPartiallyTransparent GetThemeColor DrawThemeText

Name

.text

Size

111KB

Virtual Size

110KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

692KB

Virtual Size

7.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

724B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.e7n1

Size

719KB

Virtual Size

718KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.1nsp

Size

514KB

Virtual Size

513KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

108KB

Virtual Size

108KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.3e93c11735886e8406851fb21c885447

opengl32

user32

advapi32

winspool.drv

kernel32

uxtheme

generic