jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]7436b228208d6e33d334e1efceedcf57

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7436b228208d6e33d334e1efceedcf57
Size 2.1MB
Sample261014-evah1afv41
SHA256 01a9de227fcb680df8aa31978a73ecc6182a15f8113f4faeec725e05f9c71b0b
MD5 7436b228208d6e33d334e1efceedcf57
SHA1 08b1d7918fa7e9cb63f115952a5f40cb98cec0f4
SHA512 1d19cdc3eef68bfa1b0b50cc9fe7b6c58ad466fe5e9aea158b10e474ba1f396ce3e023961e22b23a0fd804471185d88783d6f11821b44c2ebcc8b2b198c9bf3e
SSDEEP 24576:1eJo/LboSUJO7mMvk6LbZOnwLMWclNvsAq8SNPSc1AwH+av5tUP7J:1Io/4jJvQxhcldsfV5OP1
TLSH
T1C2A533EDE916126ACAE6C23004191DAFDD0A3732D4763CF7AFED98676D958AFD214003
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7436b228208d6e33d334e1efceedcf57

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7436b228208d6e33d334e1efceedcf57

.exe 2.1MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7436b228208d6e33d334e1efceedcf57

IMPHASH 85003bb27b28c24c95e9d2823b2888c1
SHA256 01a9de227fcb680df8aa31978a73ecc6182a15f8113f4faeec725e05f9c71b0b
MD5 7436b228208d6e33d334e1efceedcf57
SHA1 08b1d7918fa7e9cb63f115952a5f40cb98cec0f4
SHA512 1d19cdc3eef68bfa1b0b50cc9fe7b6c58ad466fe5e9aea158b10e474ba1f396ce3e023961e22b23a0fd804471185d88783d6f11821b44c2ebcc8b2b198c9bf3e
SSDEEP 24576:1eJo/LboSUJO7mMvk6LbZOnwLMWclNvsAq8SNPSc1AwH+av5tUP7J:1Io/4jJvQxhcldsfV5OP1
TLSH
T1C2A533EDE916126ACAE6C23004191DAFDD0A3732D4763CF7AFED98676D958AFD214003
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

crypt32

CryptDecodeObjectEx CryptFindOIDInfo CryptMsgClose CertOpenStore CertCloseStore CertCreateCertificateContext CertGetCertificateContextProperty CertControlStore CryptHashCertificate CertFindExtension CertNameToStrW CertGetNameStringW CryptProtectData CryptStringToBinaryW CryptBinaryToStringW

kernel32

GetProcAddress GlobalLock GlobalUnlock VirtualAlloc HeapFree ExitProcess GetCurrentThreadId GetLastError InitializeCriticalSectionAndSpinCount WaitForMultipleObjects SetHandleCount GetFileType SetEndOfFile CloseHandle FileTimeToLocalFileTime TlsAlloc CreateMutexW CreateFileMappingW GetModuleHandleW GetCommandLineW FindResourceExW GetSystemDirectoryW GetTempPathW CreateFileW IsValidCodePage MultiByteToWideChar WideCharToMultiByte InterlockedIncrement InterlockedDecrement GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA LoadLibraryA HeapReAlloc HeapAlloc GetOEMCP GetACP GetCPInfo LeaveCriticalSection EnterCriticalSection InitializeCriticalSection WriteFile RtlUnwind VirtualFree HeapCreate HeapDestroy GetVersionExA GetEnvironmentVariableA GetModuleHandleA GetStartupInfoA GetCommandLineA GetVersion TerminateProcess GetCurrentProcess UnhandledExceptionFilter GetModuleFileNameA FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW GetStdHandle TlsSetValue SetLastError TlsGetValue

user32

CharPrevW GetActiveWindow GetDlgItemInt GetKeyboardLayout ActivateKeyboardLayout FillRect GetMonitorInfoW GetScrollInfo CreateIcon DestroyCursor FindWindowExW SetParent SetRect MapDialogRect SetCursorPos AdjustWindowRectEx GetWindowTextW SetWindowRgn SetActiveWindow DrawIcon GetMenuItemInfoW InsertMenuW GetMenuItemCount CheckMenuItem IsWindowEnabled

psapi

EnumDeviceDrivers GetMappedFileNameW

ole32

CLSIDFromProgID CoTaskMemRealloc CoTaskMemFree CreateStreamOnHGlobal CLSIDFromString