jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]7488828e019d82a44457296f669e47e1

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7488828e019d82a44457296f669e47e1
Size 2.1MB
Sample261014-evcclayta1
SHA256 e98675efac263658b63e851a349aa40e474c7fed82d36f8dd6aa3e8443f0ad03
MD5 7488828e019d82a44457296f669e47e1
SHA1 0329dcf9179fa38e08677a709be1d9ab88beb5c3
SHA512 12f1ee545bf48cd3b9ecf8872a485bcbc01969825353e23fe0e79f81baac32ca7c61b79dea1ed3e477a74dcd46c1546b76272c6897ea8630992faef102ea47bb
SSDEEP 12288:+u6h8AroOGYqV7GECe7rNMSmmFrbyYL5kLpK5I5pnieHoeVqVPFMSQ01noOECk:+Jh8Aro7vB37BMTmNO69ebP8PWSeO
TLSH
T1DBA5231033D3C1B5E8E757F6269A831595A43F228A3449C733E41F2E1A742E7693AF63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7488828e019d82a44457296f669e47e1

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7488828e019d82a44457296f669e47e1

.exe 2.1MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.7488828e019d82a44457296f669e47e1

IMPHASH 8986ae8a90aeecedb05d50a6ea651c09
SHA256 e98675efac263658b63e851a349aa40e474c7fed82d36f8dd6aa3e8443f0ad03
MD5 7488828e019d82a44457296f669e47e1
SHA1 0329dcf9179fa38e08677a709be1d9ab88beb5c3
SHA512 12f1ee545bf48cd3b9ecf8872a485bcbc01969825353e23fe0e79f81baac32ca7c61b79dea1ed3e477a74dcd46c1546b76272c6897ea8630992faef102ea47bb
SSDEEP 12288:+u6h8AroOGYqV7GECe7rNMSmmFrbyYL5kLpK5I5pnieHoeVqVPFMSQ01noOECk:+Jh8Aro7vB37BMTmNO69ebP8PWSeO
TLSH
T1DBA5231033D3C1B5E8E757F6269A831595A43F228A3449C733E41F2E1A742E7693AF63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

58644

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winspool.drv

EnumPrintersW

crypt32

CryptProtectData CertGetCertificateChain CertGetNameStringW CryptMsgOpenToDecode CryptEnumOIDInfo CertNameToStrW CryptHashPublicKeyInfo CryptAcquireCertificatePrivateKey CertFindExtension CertVerifyTimeValidity CertControlStore CertAddStoreToCollection CertFreeCTLContext CertAddEncodedCertificateToStore CertGetCertificateContextProperty CertSetCertificateContextProperty CertCreateCertificateContext CertCloseStore CertOpenStore CryptMsgGetParam CryptBinaryToStringW CryptMsgClose CryptEncodeObject CryptDecodeObject

rasapi32

RasHangUpW

comctl32

FlatSB_SetScrollPos FlatSB_GetScrollPos CreateStatusWindowW CreateToolbarEx ImageList_GetImageInfo ImageList_GetIconSize ImageList_Read ImageList_DragEnter ImageList_BeginDrag ImageList_LoadImageW ImageList_AddMasked ImageList_Draw ImageList_GetImageCount ImageList_Create PropertySheetW FlatSB_SetScrollInfo

kernel32

LeaveCriticalSection GetFileSize CloseHandle GetCommModemStatus FileTimeToLocalFileTime lstrcmpW GetCommandLineW FindResourceW GetTempPathW GetFileAttributesW FindNextFileW FindFirstChangeNotificationW GetUserDefaultLCID EnumSystemLanguageGroupsW GetConsoleWindow RaiseException EncodePointer GetLastError SetLastError VirtualAlloc DecodePointer RtlUnwind GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsProcessorFeaturePresent IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCPInfo EnterCriticalSection HeapFree LoadLibraryExW OutputDebugStringW GetStringTypeW HeapAlloc HeapReAlloc HeapSize LCMapStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CreateFileW ExitProcess GetCurrentThreadId

user32

BringWindowToTop EndDialog GetDialogBaseUnits CharPrevW GetMenuInfo SetMenuDefaultItem DrawIcon DrawTextW UpdateWindow SetForegroundWindow GetDC ScrollWindow MessageBeep ClientToScreen ScreenToClient IsWindow GetParent SetParent GetTopWindow GetWindowThreadProcessId LoadCursorW CreateIcon LoadImageW GetIconInfo MapDialogRect SetScrollInfo DdeUninitialize DdeAbandonTransaction GetMessageW ActivateKeyboardLayout DrawFocusRect RegisterClassW

advapi32

OpenSCManagerW RegDeleteKeyW RegCloseKey RegEnumValueW RegQueryInfoKeyW