jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]DownloadHelper[.]gen[.]e77920d20d37469142109e564ed5ef45

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.e77920d20d37469142109e564ed5ef45
Size 2.8MB
Sample261014-ezyfmaf15q
SHA256 e19b2c58f87ee45e1a8293c627625287d4743965807081409c18bbf7cbbed3be
MD5 e77920d20d37469142109e564ed5ef45
SHA1 4e82847db840286e88aa73ae6f73e023d18dd13b
SHA512 3c22acc34514efedd9b94fa46f2a55a99ad4066058f6d7c81fe263b7683abdf91002b934fa964c7ecab410a1d55da60c019f29d2391684cf793fb04aefe2bbfb
SSDEEP 24576:IKf/WYPpV+bd+LtEwStYBbIY501xfY3olh/UPPy:IKnBBuMt1tfua4MPy
TLSH
T1E9D52311A4D3C471F5E22DF5946996AA993C3D20DEA848C767C03E1D67703C2E63AF2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.e77920d20d37469142109e564ed5ef45

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.e77920d20d37469142109e564ed5ef45

.exe 2.8MB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.DownloadHelper.gen.e77920d20d37469142109e564ed5ef45

IMPHASH 8713fa325b94fbc19cb7b2e1783c8f72
SHA256 e19b2c58f87ee45e1a8293c627625287d4743965807081409c18bbf7cbbed3be
MD5 e77920d20d37469142109e564ed5ef45
SHA1 4e82847db840286e88aa73ae6f73e023d18dd13b
SHA512 3c22acc34514efedd9b94fa46f2a55a99ad4066058f6d7c81fe263b7683abdf91002b934fa964c7ecab410a1d55da60c019f29d2391684cf793fb04aefe2bbfb
SSDEEP 24576:IKf/WYPpV+bd+LtEwStYBbIY501xfY3olh/UPPy:IKnBBuMt1tfua4MPy
TLSH
T1E9D52311A4D3C471F5E22DF5946996AA993C3D20DEA848C767C03E1D67703C2E63AF2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

85320

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

LoadCursorFromFileW CheckMenuRadioItem SetWindowsHookExW IntersectRect WindowFromPoint SetCursorPos GetWindowContextHelpId ScrollWindowEx LockWindowUpdate CreateIcon EndPaint GetWindowDC DrawTextW CreatePopupMenu SetTimer SetFocus CountClipboardFormats GetNextDlgTabItem CheckDlgButton EndDialog SystemParametersInfoW InvalidateRect CreateDialogParamW BeginDeferWindowPos SetWindowPos ShowWindow

kernel32

CreateFileW CloseHandle WriteConsoleW SetStdHandle GetConsoleMode GetConsoleCP FlushFileBuffers HeapSize HeapAlloc GetStringTypeW OutputDebugStringW RtlUnwind LoadLibraryExW VirtualAlloc HeapReAlloc GetEnvironmentStringsW FreeEnvironmentStringsW WaitForSingleObject ReadFile SetFilePointer SetFilePointerEx SystemTimeToFileTime lstrcmpW OpenSemaphoreW LoadLibraryW GetModuleHandleW EnumResourceNamesW ReplaceFileW GetACP GetOEMCP GetCPInfo WideCharToMultiByte LCMapStringW GetConsoleWindow GetCommandLineW RaiseException EncodePointer GetLastError SetLastError GetCurrentThreadId DecodePointer ExitProcess GetModuleHandleExW GetProcAddress MultiByteToWideChar GetProcessHeap GetStdHandle GetFileType DeleteCriticalSection GetStartupInfoW GetModuleFileNameW WriteFile QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime UnhandledExceptionFilter SetUnhandledExceptionFilter InitializeCriticalSectionAndSpinCount Sleep GetCurrentProcess TerminateProcess TlsAlloc TlsGetValue TlsSetValue TlsFree IsProcessorFeaturePresent IsDebuggerPresent IsValidCodePage EnterCriticalSection LeaveCriticalSection HeapFree

mpr

WNetGetConnectionW WNetGetLastErrorW

advapi32

RegQueryInfoKeyW RegOpenKeyExW RegEnumValueW

Sharing