jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Generic[.]f7ec34999d95ad62c1fb3e85f233982f

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.f7ec34999d95ad62c1fb3e85f233982f
Size 849KB
Sample261014-fb2ntags8n
SHA256 92141366a70fc318cc68ce3eb8e03315de4a518ea304b29037e3a5e0c99c7258
MD5 f7ec34999d95ad62c1fb3e85f233982f
SHA1 219ecb4885aa7df36b54bbe298452733df7971ed
SHA512 19eec0198300b569b85cd9e5ea8846a19618342ade7622b3fdb9d076ce5e8dac8de7d25860d6cc136df7694de95401d40250117dac65bf4a51453a463f73e65e
SSDEEP 12288:UtE8c9voD4DBroTROGPQZzDiXOXLPMkUxeAbGeeV4ynQO6DpAEFFo06x5r8:UtE8sosDBMwnxDiXoLKeApqLQTFbOr
TLSH
T10D05125B71E09471F4F7593278E1E9B0682AF9264A21AEFB674C012B4F741C1DA35C3B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.f7ec34999d95ad62c1fb3e85f233982f

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.f7ec34999d95ad62c1fb3e85f233982f

.exe 849KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Generic.f7ec34999d95ad62c1fb3e85f233982f

IMPHASH 993aea16d8bdc7f921e757356cc37990
SHA256 92141366a70fc318cc68ce3eb8e03315de4a518ea304b29037e3a5e0c99c7258
MD5 f7ec34999d95ad62c1fb3e85f233982f
SHA1 219ecb4885aa7df36b54bbe298452733df7971ed
SHA512 19eec0198300b569b85cd9e5ea8846a19618342ade7622b3fdb9d076ce5e8dac8de7d25860d6cc136df7694de95401d40250117dac65bf4a51453a463f73e65e
SSDEEP 12288:UtE8c9voD4DBroTROGPQZzDiXOXLPMkUxeAbGeeV4ynQO6DpAEFFo06x5r8:UtE8sosDBMwnxDiXoLKeApqLQTFbOr
TLSH
T10D05125B71E09471F4F7593278E1E9B0682AF9264A21AEFB674C012B4F741C1DA35C3B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

8145

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

CreateFileW DecodePointer WriteConsoleW GetModuleHandleW GetConsoleMode GetConsoleCP FlushFileBuffers HeapReAlloc HeapSize SetFilePointerEx VirtualProtect UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle WriteFile GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte ExitProcess GetModuleHandleExW GetACP HeapFree HeapAlloc CloseHandle FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW SetStdHandle GetFileType GetStringTypeW GetProcessHeap RaiseException

user32

TranslateMessage PeekMessageW CreateWindowExW RegisterClassW LoadCursorW DefWindowProcW PostQuitMessage EndPaint BeginPaint SendMessageW

gdi32

CreateSolidBrush

Sharing