jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]697977254642f3b9e0ce61e8e302ad45

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.697977254642f3b9e0ce61e8e302ad45
Size 2.8MB
Sample261014-eterbsfv4y
SHA256 28451c71ee9a83f23dd9caddf9853bd07e450602b50b22d11c8977b612d6a753
MD5 697977254642f3b9e0ce61e8e302ad45
SHA1 ce5d3f7cceba688e96b5f46edb356a9f5558fd5e
SHA512 dedbe02ec1222e54686e161ef7402fe82ccf7123d22a62591468cbeb016cbec36d630e193ecede42a72c45f5bf99c9db509b6a131b5cbdafaccd5ad80049ee05
SSDEEP 24576:zD/JQ19dQDgDYhfxE2EaHOdKYUIEfqmamOyOnudw6UJ:WLjxW4J
TLSH
T1A3D5232AB525AE93D5F089BD57BBE3C90FACAD250C20C4073584F75CE5BE845B819B83
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.697977254642f3b9e0ce61e8e302ad45

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.697977254642f3b9e0ce61e8e302ad45

.exe 2.8MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.697977254642f3b9e0ce61e8e302ad45

IMPHASH 20e2d44128f525ae01cdfee03902aaf5
SHA256 28451c71ee9a83f23dd9caddf9853bd07e450602b50b22d11c8977b612d6a753
MD5 697977254642f3b9e0ce61e8e302ad45
SHA1 ce5d3f7cceba688e96b5f46edb356a9f5558fd5e
SHA512 dedbe02ec1222e54686e161ef7402fe82ccf7123d22a62591468cbeb016cbec36d630e193ecede42a72c45f5bf99c9db509b6a131b5cbdafaccd5ad80049ee05
SSDEEP 24576:zD/JQ19dQDgDYhfxE2EaHOdKYUIEfqmamOyOnudw6UJ:WLjxW4J
TLSH
T1A3D5232AB525AE93D5F089BD57BBE3C90FACAD250C20C4073584F75CE5BE845B819B83
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

10

Major OS version

5

Entry point

2562056

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiGetActualSectionToInstallW SetupDiSetDeviceInstallParamsW SetupDiGetDeviceInstallParamsW SetupDiGetClassDevsExW SetupDiGetDeviceInterfaceDetailW SetupDiOpenDeviceInterfaceW SetupDiCreateDeviceInfoList SetupCloseFileQueue SetupGetIntField SetupGetLineCountW SetupFindNextLine SetupCloseInfFile

winspool.drv

DeletePrinterConnectionW

msvcrt

_except_handler3 __set_app_type memset __p__fmode _adjust_fdiv __setusermatherr _initterm __getmainargs _controlfp __p__commode _acmdln exit _XcptFilter _exit

comdlg32

ChooseFontW PrintDlgExW CommDlgExtendedError GetSaveFileNameW

secur32

InitializeSecurityContextW

user32

GetDC SetActiveWindow InsertMenuW ScrollDC GetWindowInfo

mpr

WNetGetResourceInformationW WNetOpenEnumW

kernel32

WaitForSingleObject ReleaseSemaphore DeleteCriticalSection LeaveCriticalSection EnterCriticalSection InitializeCriticalSection IsDebuggerPresent GetLastError GetStartupInfoA GetModuleHandleA GetCurrentThreadId GetFileType GetEnvironmentStringsW VirtualAlloc GlobalLock GetFileAttributesW DeleteFileW GetCPInfo LCMapStringW IsValidLocale GetThreadLocale GetStringTypeW CloseHandle GetCommTimeouts SystemTimeToTzSpecificLocalTime GetCurrentThread LoadLibraryExW

Sharing