jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]8ea4e0052c51692defa51442caba4da3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8ea4e0052c51692defa51442caba4da3
Size 923KB
Sample261014-ev2mgsed83
SHA256 e50cbc3082ad0843cc2957d712b191e460ca88984cd1d9490b9760e070301ba9
MD5 8ea4e0052c51692defa51442caba4da3
SHA1 1b01c70628010d72cef933d0a90b12a7ea1369d0
SHA512 d347433af1668f02ee27f5743186bdb34cbb9d5f2fdd04f8629f879d96b0b0c7adaf55e0a7277180c245e64f20370286913de5a45773fd1aeaa62be40dc371ca
SSDEEP 12288:fgk06//rRqiZlMOnpDBrQXjMJ7sTjOJkd6wlE1+Kmmgw1geJcz6PYfup3V5hu38:oat2O1QoJoE67lFKmCjy2NLhk8
TLSH
T1BA152351F1D2C530D4EE03320ED1662B027FFD362FB00A9F769225555AA01E1AE76BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8ea4e0052c51692defa51442caba4da3

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8ea4e0052c51692defa51442caba4da3

.exe 923KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8ea4e0052c51692defa51442caba4da3

IMPHASH a504ecbc4002b6e14f9989c0231d93e2
SHA256 e50cbc3082ad0843cc2957d712b191e460ca88984cd1d9490b9760e070301ba9
MD5 8ea4e0052c51692defa51442caba4da3
SHA1 1b01c70628010d72cef933d0a90b12a7ea1369d0
SHA512 d347433af1668f02ee27f5743186bdb34cbb9d5f2fdd04f8629f879d96b0b0c7adaf55e0a7277180c245e64f20370286913de5a45773fd1aeaa62be40dc371ca
SSDEEP 12288:fgk06//rRqiZlMOnpDBrQXjMJ7sTjOJkd6wlE1+Kmmgw1geJcz6PYfup3V5hu38:oat2O1QoJoE67lFKmCjy2NLhk8
TLSH
T1BA152351F1D2C530D4EE03320ED1662B027FFD362FB00A9F769225555AA01E1AE76BBB
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

31201

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

SystemParametersInfoW GetIconInfo CopyIcon DestroyIcon GetTopWindow IntersectRect WindowFromPoint GetWindowTextW SetWindowTextW GetUpdateRect EndPaint GetDCEx SetMenuDefaultItem TrackPopupMenu GetKeyboardType GetDlgItem DefWindowProcW

kernel32

HeapSize HeapReAlloc HeapAlloc RtlUnwind LoadLibraryExW IsProcessorFeaturePresent IsDebuggerPresent GetProcAddress GetVersion GlobalFree LCMapStringW GetEnvironmentStringsW GetCurrentThreadId GetLastError SetHandleCount SetFilePointer CloseHandle GetSystemTimeAsFileTime CreateEventW OutputDebugStringW GetConsoleCP DeleteFileW CompareStringW GetLocaleInfoW GetStringTypeW VirtualAlloc FlushFileBuffers GetCPInfo GetOEMCP GetACP IsValidCodePage HeapFree LeaveCriticalSection EnterCriticalSection GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter CreateFileW WriteConsoleW UnhandledExceptionFilter SetFilePointerEx SetStdHandle GetCommandLineW SetLastError EncodePointer DecodePointer ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId FreeEnvironmentStringsW GetConsoleMode

comdlg32

CommDlgExtendedError PrintDlgW ReplaceTextW PageSetupDlgW

oleaut32

CreateErrorInfo GetErrorInfo SetErrorInfo RegisterTypeLi LoadTypeLi VarBstrFromBool VarDateFromStr VarR8FromStr VariantChangeTypeEx VariantChangeType VariantCopyInd VariantInit SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayGetElement SafeArrayUnaccessData SafeArrayGetUBound SysFreeString SysReAllocStringLen

advapi32

RegEnumValueW

uxtheme

EnableThemeDialogTexture OpenThemeData