jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]cd10b147a2857516e7a9e4565ed00272

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.cd10b147a2857516e7a9e4565ed00272
Size 1.8MB
Sample261014-ey8j7sf14p
SHA256 119f444e4e93da41504c2bf81d68faaf49ab672d7dba59166d98142f55aa1c64
MD5 cd10b147a2857516e7a9e4565ed00272
SHA1 7e7eb0e3b215c944b8ddc1d3b0ea5d4e0543cd46
SHA512 42349842fd670873ab6b524fba93ecc115434626c23782ed2a58c2c2737776ef6fbd3b1dd113473d39bb9fb1220ea8ca9e00f433d75ba3cde6ee4df28ba563e4
SSDEEP 24576:s7dXtAXnkqvKH03mmA315XzRGCaFRqnHlq:s7dXmXkqvKUuFzsCsRq
TLSH
T16085230632D5C076EAB747F24496882E243A3D66A7B458873BD09F1E58742D3FA34F63
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.cd10b147a2857516e7a9e4565ed00272

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.cd10b147a2857516e7a9e4565ed00272

.exe 1.8MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.cd10b147a2857516e7a9e4565ed00272

IMPHASH 65b561a9306976b6234c064a92faba2a
SHA256 119f444e4e93da41504c2bf81d68faaf49ab672d7dba59166d98142f55aa1c64
MD5 cd10b147a2857516e7a9e4565ed00272
SHA1 7e7eb0e3b215c944b8ddc1d3b0ea5d4e0543cd46
SHA512 42349842fd670873ab6b524fba93ecc115434626c23782ed2a58c2c2737776ef6fbd3b1dd113473d39bb9fb1220ea8ca9e00f433d75ba3cde6ee4df28ba563e4
SSDEEP 24576:s7dXtAXnkqvKH03mmA315XzRGCaFRqnHlq:s7dXmXkqvKUuFzsCsRq
TLSH
T16085230632D5C076EAB747F24496882E243A3D66A7B458873BD09F1E58742D3FA34F63
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95254

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

RemoveMenu DispatchMessageW SetMessageExtraInfo SendMessageW DdeFreeStringHandle LoadStringW FindWindowExW DestroyCaret LockWindowUpdate IsHungAppWindow GetKeyboardType CharNextW CallMsgFilterW GetDlgCtrlID CheckRadioButton

kernel32

GetFileAttributesW FindFirstFileExW FindFirstFileW FindNextFileW GetThreadLocale GetUserDefaultLCID GetFullPathNameW GetTempPathW FindResourceExW GetCommandLineW LoadLibraryExW CreateMutexW GetCommState ClearCommError CloseHandle ReadFile WaitForSingleObject ReleaseSemaphore InitializeCriticalSectionAndSpinCount LeaveCriticalSection EnterCriticalSection FreeEnvironmentStringsW HeapSize VirtualAlloc LocalAlloc RtlUnwind HeapAlloc HeapReAlloc LCMapStringW GetStringTypeW OutputDebugStringW CreateFileW FlushFileBuffers GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx WriteConsoleW GetStringTypeExW RaiseException EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar WideCharToMultiByte GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime GetEnvironmentStringsW UnhandledExceptionFilter SetUnhandledExceptionFilter Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree GetModuleHandleW IsProcessorFeaturePresent IsDebuggerPresent IsValidCodePage GetACP GetOEMCP GetCPInfo HeapFree

comctl32

ImageList_Write ord17 InitCommonControlsEx ImageList_Create ImageList_Destroy ImageList_SetBkColor ImageList_GetBkColor ImageList_SetOverlayImage ImageList_Draw ImageList_AddMasked InitializeFlatSB FlatSB_SetScrollProp _TrackMouseEvent CreateToolbarEx ImageList_GetImageInfo ImageList_SetIconSize PropertySheetW ImageList_GetDragImage ImageList_SetDragCursorImage ImageList_DragLeave ImageList_DragEnter ImageList_BeginDrag ImageList_LoadImageW ImageList_Remove

ole32

CoTaskMemRealloc ReleaseStgMedium CLSIDFromProgID

crypt32

CryptEncodeObject CryptMsgUpdate CryptMsgGetParam CertCloseStore CertFreeCTLContext CertGetPublicKeyLength CryptHashCertificate CertVerifyTimeValidity CertFreeCertificateChain CryptFindOIDInfo