jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]91990b2a71b4496d16eeca2a1944c7d3

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.91990b2a71b4496d16eeca2a1944c7d3
Size 2.3MB
Sample261014-ewjs3afv6x
SHA256 176c50b366386926f37d0baf3a946242ab99f527ec4541084607a04360c582ed
MD5 91990b2a71b4496d16eeca2a1944c7d3
SHA1 6d4d8d95a6eb76466adc9ec51c733070413a4d4e
SHA512 29f0e4bf90530dc7248b145e86cf2268c9406227c867c1e472947c287589f24dfee611285aec5d16138714f80c38832ce4b143a12d359be3e3883b314367295a
SSDEEP 24576:cRto8YqdJbp2h6Ev0oQ+9S09esveWH2FwrGb5N:cXV2Fv0oRp9rvdWFwKr
TLSH
T1B2B5EF3360CFE8B5D46745B78DA19A2018D42DA11BEC19F636DFBA3B4A30EDD6721813
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.91990b2a71b4496d16eeca2a1944c7d3

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.91990b2a71b4496d16eeca2a1944c7d3

.exe 2.3MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.91990b2a71b4496d16eeca2a1944c7d3

IMPHASH 2b2286963446e490fb6475a54ccf9639
SHA256 176c50b366386926f37d0baf3a946242ab99f527ec4541084607a04360c582ed
MD5 91990b2a71b4496d16eeca2a1944c7d3
SHA1 6d4d8d95a6eb76466adc9ec51c733070413a4d4e
SHA512 29f0e4bf90530dc7248b145e86cf2268c9406227c867c1e472947c287589f24dfee611285aec5d16138714f80c38832ce4b143a12d359be3e3883b314367295a
SSDEEP 24576:cRto8YqdJbp2h6Ev0oQ+9S09esveWH2FwrGb5N:cXV2Fv0oRp9rvdWFwKr
TLSH
T1B2B5EF3360CFE8B5D46745B78DA19A2018D42DA11BEC19F636DFBA3B4A30EDD6721813
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

45758

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

advapi32

RegOpenKeyExW RegDeleteValueW

crypt32

CryptFindOIDInfo CryptMsgClose CryptMsgGetParam CertOpenStore CertEnumCertificatesInStore CertSetCertificateContextProperty CertFreeCRLContext CertAddCertificateContextToStore CertControlStore CertGetEnhancedKeyUsage CertVerifyCertificateChainPolicy

kernel32

GlobalAlloc GlobalUnlock VirtualAlloc HeapFree SetErrorMode InitializeCriticalSectionAndSpinCount DeleteCriticalSection GetFileType GetSystemInfo SystemTimeToFileTime GetSystemTimeAdjustment CreateEventW GetModuleHandleW GetSystemDirectoryW GetTempPathW CreateFileW BuildCommDCBAndTimeoutsW GetCPInfo CompareStringW GetCommandLineW RaiseException IsProcessorFeaturePresent EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW FreeEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsDebuggerPresent IsValidCodePage GetACP GetOEMCP EnterCriticalSection LeaveCriticalSection LoadLibraryExW RtlUnwind OutputDebugStringW GetStringTypeW HeapAlloc HeapReAlloc HeapSize LCMapStringW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW CloseHandle

user32

DrawFocusRect FrameRect SetRectEmpty OffsetRect GetShellWindow SetWindowContextHelpId LoadBitmapW CreateIcon CreateIconFromResourceEx CopyIcon SystemParametersInfoW GetScrollPos GetUpdateRect GetWindowDC GetDC DrawTextW SetMenuDefaultItem SetMenuItemInfoW InsertMenuW GetMenuItemID DestroyMenu LoadMenuW GetSystemMetrics EnableWindow GetInputState CharUpperW CloseClipboard SendDlgItemMessageW CreateDialogParamW SetWindowPlacement GetWindowPlacement ShowWindow IsWindow CreateWindowExW RegisterClassExW GetClassNameW DrawFrameControl

oleaut32

SetErrorInfo RegisterTypeLi LoadTypeLi VarNot VarNeg VarBoolFromStr VarBstrFromBool VarBstrFromCy VarCyFromStr VarDateFromStr VarI4FromStr VariantChangeTypeEx VariantChangeType VariantCopy SafeArrayGetElement SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetLBound SafeArrayGetUBound SafeArrayRedim SafeArrayCreate SysFreeString SysReAllocStringLen SysAllocStringLen GetErrorInfo

wsock32

WSAAsyncGetHostByName

Name

.text

Size

83KB

Virtual Size

82KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

292KB

Virtual Size

7.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1024B

Virtual Size

724B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.oat5tl

Size

602KB

Virtual Size

602KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.d5is1

Size

382KB

Virtual Size

381KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.od84te

Size

236KB

Virtual Size

236KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.82a22

Size

426KB

Virtual Size

425KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

362KB

Virtual Size

362KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.91990b2a71b4496d16eeca2a1944c7d3

advapi32

crypt32

kernel32

user32

oleaut32

wsock32

generic