jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]4ce82bdf0b21b17130c396e9f22501e1

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.4ce82bdf0b21b17130c396e9f22501e1
Size 2.8MB
Sample261014-espvxayshz
SHA256 36da25f0a147c72f10d0260a242da416e5d2ba088fdc0c5d65fa14f503f1f546
MD5 4ce82bdf0b21b17130c396e9f22501e1
SHA1 c94d7ea1577ec1810e609c5c05130f9b528b1994
SHA512 6d832cfd6cb84260c8a9222975fbdb8297d9749e95d53e95dbc055391d193cdb2c2f0384b85922825030106ed980c0ab703ac4d9e6d9f852628740119f362690
SSDEEP 24576:tsWdUkGbkfkVDDFNoH/HHeGJV99CXPmElSAVmZUD:ndILofnjUuuEZUD
TLSH
T1A4D5231163C1C0BAD1BB86FA096A8419E8B83E21976049D733C1DF4E95723C3E766F27
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.4ce82bdf0b21b17130c396e9f22501e1

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.4ce82bdf0b21b17130c396e9f22501e1

.exe 2.8MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.4ce82bdf0b21b17130c396e9f22501e1

IMPHASH ea5556b5e05bdadb83aea1315345a2a9
SHA256 36da25f0a147c72f10d0260a242da416e5d2ba088fdc0c5d65fa14f503f1f546
MD5 4ce82bdf0b21b17130c396e9f22501e1
SHA1 c94d7ea1577ec1810e609c5c05130f9b528b1994
SHA512 6d832cfd6cb84260c8a9222975fbdb8297d9749e95d53e95dbc055391d193cdb2c2f0384b85922825030106ed980c0ab703ac4d9e6d9f852628740119f362690
SSDEEP 24576:tsWdUkGbkfkVDDFNoH/HHeGJV99CXPmElSAVmZUD:ndILofnjUuuEZUD
TLSH
T1A4D5231163C1C0BAD1BB86FA096A8419E8B83E21976049D733C1DF4E95723C3E766F27
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

69534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateEventW CreateSemaphoreW SetWaitableTimer CreateFileMappingW CreateProcessW OutputDebugStringW TlsGetValue VerifyVersionInfoW CreateJobObjectW FindVolumeMountPointClose GetACP GetOEMCP FileTimeToLocalFileTime SetCommState CloseHandle GetLastError FindFirstFileW VirtualAlloc WriteConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers LCMapStringW HeapSize HeapReAlloc HeapAlloc GetStringTypeW RtlUnwind LoadLibraryExW HeapFree LeaveCriticalSection EnterCriticalSection GetCommandLineW RaiseException IsProcessorFeaturePresent EncodePointer SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsSetValue TlsFree GetModuleHandleW IsDebuggerPresent IsValidCodePage GetCPInfo CreateFileW

advapi32

RegOpenKeyExW RegEnumKeyExW RegDeleteKeyW RegCloseKey OpenSCManagerW

user32

GetTitleBarInfo EnumDisplayMonitors GetScrollInfo SetScrollInfo FindWindowW InflateRect DrawFocusRect SetCursor EnableScrollBar RedrawWindow ReleaseDC GetWindowDC GetDCEx GetMenuItemInfoW DrawMenuBar IsWindowEnabled GetKeyboardType IsDlgButtonChecked GetDlgItem CreateDialogParamW RegisterClassExW GetClassInfoW InSendMessageEx PeekMessageW GetKeyboardLayoutList

Sharing