jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]8170ef0aedb6c58d99a85b6409a926e4

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8170ef0aedb6c58d99a85b6409a926e4
Size 2.9MB
Sample261014-evhvdaytbx
SHA256 4f992b2ed28c72eade731788ff16a3fd62dea5e9fab071d484c4bc60f29c975a
MD5 8170ef0aedb6c58d99a85b6409a926e4
SHA1 3d65d268544e2cf026c8d5c3cbec9172b23a11f2
SHA512 ae402c0634b5589046c4735bda63025795bc725134c085c8e130f3b83868b6b90fffd213033543c15406628c5e49352326469c0d6da13cead8a9c7867a0f9893
SSDEEP 24576:0e5vDivA31ITPlZk1D0XbeelCJ4MvFePrpdlB:0MgAALC0SGCZvalB
TLSH
T12DE51211A271EC1BC4AA41F805BF9F148018EF65066059A373F5BE4FE63278F951BE63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8170ef0aedb6c58d99a85b6409a926e4

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8170ef0aedb6c58d99a85b6409a926e4

.exe 2.9MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.8170ef0aedb6c58d99a85b6409a926e4

IMPHASH cf7ebd7a96f2823d67af0af8515d9495
SHA256 4f992b2ed28c72eade731788ff16a3fd62dea5e9fab071d484c4bc60f29c975a
MD5 8170ef0aedb6c58d99a85b6409a926e4
SHA1 3d65d268544e2cf026c8d5c3cbec9172b23a11f2
SHA512 ae402c0634b5589046c4735bda63025795bc725134c085c8e130f3b83868b6b90fffd213033543c15406628c5e49352326469c0d6da13cead8a9c7867a0f9893
SSDEEP 24576:0e5vDivA31ITPlZk1D0XbeelCJ4MvFePrpdlB:0MgAALC0SGCZvalB
TLSH
T12DE51211A271EC1BC4AA41F805BF9F148018EF65066059A373F5BE4FE63278F951BE63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

87780

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualFree EnterCriticalSection DeleteCriticalSection GetFileSizeEx MulDiv GetSystemTime GetLocalTime FileTimeToLocalFileTime lstrcmpiW CreateEventW VirtualAlloc GetSystemDirectoryW LCMapStringW EnumCalendarInfoExW GetStringTypeW EnumSystemLocalesW CloseHandle WriteConsoleW SetFilePointerEx SetStdHandle LocalSize LocalAlloc GlobalFree CreateProcessW GlobalLock GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize HeapReAlloc HeapAlloc OutputDebugStringW RtlUnwind LoadLibraryExW HeapFree LeaveCriticalSection GetCPInfo GetOEMCP GetACP IsValidCodePage IsDebuggerPresent IsProcessorFeaturePresent GetModuleHandleW TlsFree TlsSetValue TlsGetValue TlsAlloc TerminateProcess GetCurrentProcess Sleep InitializeCriticalSectionAndSpinCount SetUnhandledExceptionFilter UnhandledExceptionFilter FreeEnvironmentStringsW CreateFileW GetEnvironmentStringsW GetCommandLineW RaiseException EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime

winspool.drv

ReadPrinter EndPagePrinter DeleteFormW

advapi32

RegDeleteKeyW RegCreateKeyExW RegCloseKey RegOpenKeyExW

shell32

DragFinish

user32

FrameRect FillRect GetSysColor GetWindowRect EnableScrollBar GetMenuItemInfoW CheckMenuItem SetCapture GetFocus SetRectEmpty SendDlgItemMessageW CheckRadioButton GetDlgItemTextW BeginDeferWindowPos IsWindow CallWindowProcW PeekMessageW GetKeyboardLayout GetKeyboardLayoutList ActivateKeyboardLayout GetOpenClipboardWindow CreateIcon GetDC

opengl32

glStencilFunc glReadPixels glIsEnabled glGetError glGenTextures glEnable glDrawArrays glDisable glDepthMask glDepthFunc glDeleteTextures glColorMask glClearColor glClear glStencilOp