jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]85b524b2885d62db8249edbbf2cf267e

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.85b524b2885d62db8249edbbf2cf267e
Size 1.6MB
Sample261014-evv5psytcv
SHA256 9899e67cff4cf272cafd05fda8089cbcb253ec1f2a7aaf369996e7f5e4ffea9c
MD5 85b524b2885d62db8249edbbf2cf267e
SHA1 ab79eab99358735afce541e6feaa8677e8abf5f1
SHA512 58ed2ef8bee7c03c19d57a35476d5906ff29e53398fb7913fa2b4cd417a58361f84c57d1136b0f4da13d53135bf106befa66db0824eaf97727a4ed14cf0fd298
SSDEEP 24576:kQA46L5NG8z72ekIwGGVeATcncs1kmbYRJEkZ5Qj4sGHYXV9dvXEmzhQ:kQA4G+LcGEo0KY/VQ
TLSH
T1538523062260D065D0BBA7F1A91B5A353568BDB69A31CCCB36D43F1EA2752C32774F32
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.85b524b2885d62db8249edbbf2cf267e

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.85b524b2885d62db8249edbbf2cf267e

.exe 1.6MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.85b524b2885d62db8249edbbf2cf267e

IMPHASH cf430c794311c2a18de2b9830a2ade05
SHA256 9899e67cff4cf272cafd05fda8089cbcb253ec1f2a7aaf369996e7f5e4ffea9c
MD5 85b524b2885d62db8249edbbf2cf267e
SHA1 ab79eab99358735afce541e6feaa8677e8abf5f1
SHA512 58ed2ef8bee7c03c19d57a35476d5906ff29e53398fb7913fa2b4cd417a58361f84c57d1136b0f4da13d53135bf106befa66db0824eaf97727a4ed14cf0fd298
SSDEEP 24576:kQA46L5NG8z72ekIwGGVeATcncs1kmbYRJEkZ5Qj4sGHYXV9dvXEmzhQ:kQA4G+LcGEo0KY/VQ
TLSH
T1538523062260D065D0BBA7F1A91B5A353568BDB69A31CCCB36D43F1EA2752C32774F32
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

20608

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

EnumPropsExW ReleaseDC EnumClipboardFormats SetWindowPos BroadcastSystemMessageW

advapi32

GetTraceLoggerHandle UnregisterTraceGuids RegCreateKeyExW RegSetValueExW

winspool.drv

GetPrinterDataExW

kernel32

CreateFileW GetLocaleInfoW HeapDestroy GetFileSize GetTempPathW InterlockedExchange GetConsoleMode GetCPInfo VirtualAlloc GetProcessHeap WaitCommEvent SystemTimeToTzSpecificLocalTime EnumResourceNamesW RemoveDirectoryW GetConsoleWindow RaiseException IsProcessorFeaturePresent EncodePointer IsDebuggerPresent DecodePointer IsValidCodePage GetACP GetOEMCP GetLastError SetLastError GetCurrentThreadId RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsGetValue TlsSetValue CloseHandle GetProcAddress EnterCriticalSection LeaveCriticalSection DeleteCriticalSection ExitProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapFree GetStringTypeW GetStdHandle WriteFile GetModuleFileNameW LoadLibraryExW HeapAlloc LCMapStringW OutputDebugStringW FlushFileBuffers GetConsoleCP SetStdHandle SetFilePointerEx WriteConsoleW

comdlg32

GetOpenFileNameW GetSaveFileNameW ReplaceTextW ChooseColorW PrintDlgExW

wintrust

CryptCATCatalogInfoFromContext CryptCATAdminReleaseContext WTHelperProvDataFromStateData WTHelperGetProvCertFromChain

Sharing