jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]OutBrowse[.]gen[.]f739993ac48b226fc8ad0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.OutBrowse.gen.f739993ac48b226fc8ad0
Size 469KB
Sample261014-fdextsfx7t
SHA256 d1fa2bb877396cc7e071e35c5c8bc2cf9133bcdc8e94498544828f6c841f758d
MD5 2b34edefe8ff739993ac48b226fc8ad0
SHA1 867147e2678176e8b86df7f17aab22b5749512b3
SHA512 6628ec0feba7d84a7ccb55331a99b57681fa7abd17e1e24c615519fc20437709f35d298933430e4306545c0991a7745088eb986333300507679c3ff9d25344c2
SSDEEP 12288:GHYRuAGQo3R8ewHUYEzieBY8vQUAbqdeDGPj+:PRGQo3aew5ExBMa9S
TLSH
T107A48D167AF9D031E17242358FAEF70184BDF972092A554B73D84B1E2AB04C3EA25F67
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Untrusted Codesign Signers 1 IoCs

Codesigned file was signed by an untrusted entity.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.OutBrowse.gen.f739993ac48b226fc8ad0

File Explorer

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.OutBrowse.gen.f739993ac48b226fc8ad0

.exe 469KB

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.OutBrowse.gen.f739993ac48b226fc8ad0

IMPHASH f53680fcb218606fb91bea46d53ac736
SHA256 d1fa2bb877396cc7e071e35c5c8bc2cf9133bcdc8e94498544828f6c841f758d
MD5 2b34edefe8ff739993ac48b226fc8ad0
SHA1 867147e2678176e8b86df7f17aab22b5749512b3
SHA512 6628ec0feba7d84a7ccb55331a99b57681fa7abd17e1e24c615519fc20437709f35d298933430e4306545c0991a7745088eb986333300507679c3ff9d25344c2
SSDEEP 12288:GHYRuAGQo3R8ewHUYEzieBY8vQUAbqdeDGPj+:PRGQo3aew5ExBMa9S
TLSH
T107A48D167AF9D031E17242358FAEF70184BDF972092A554B73D84B1E2AB04C3EA25F67
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Untrusted Codesign Signers

Codesigned file was signed by an untrusted entity.

PE Signature issue

Digest

39:28:83:ce:a4:8d:b0:95:c7:ca:c4:f3:df:9a:be:1f:e6:18:f2:82

Digest Algorithm

sha1

PE Digests Matches

Trusted

Not trusted

Signing Certificate

CN=CoNFIrmEd App Nln,O=CoNFIrmEd App Nln,L=Dublin,ST=Dublin,C=IE

Chains

Oct 7, 2026

CN=CoNFIrmEd App Nln,O=CoNFIrmEd App Nln,L=Dublin,ST=Dublin,C=IE

CN=thawte SHA256 Code Signing CA,O=thawte\, Inc.,C=US

Minor OS version

Major OS version

Entry point

219426

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

winhttp

WinHttpCrackUrl WinHttpOpen WinHttpConnect WinHttpReadData WinHttpWriteData WinHttpQueryDataAvailable WinHttpSetOption WinHttpSetTimeouts WinHttpOpenRequest WinHttpAddRequestHeaders WinHttpSendRequest WinHttpReceiveResponse WinHttpQueryHeaders WinHttpGetProxyForUrl WinHttpGetIEProxyConfigForCurrentUser WinHttpCloseHandle

kernel32

GlobalLock GlobalUnlock FlushInstructionCache GetCurrentProcess ExitProcess RaiseException GetCurrentThreadId GetLastError SetLastError EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection LoadResource MulDiv lstrcmpW GetModuleFileNameW FindResourceW MultiByteToWideChar GetCommandLineW GlobalHandle GlobalFree CreateThread GetVersion GetExitCodeProcess WaitForSingleObject Sleep FindClose CloseHandle CreateProcessW DeleteFileW FindFirstFileW FindNextFileW IsWow64Process WideCharToMultiByte SetEvent GlobalAlloc HeapAlloc HeapReAlloc HeapFree HeapSize GetProcessHeap LocalFree FormatMessageW DecodePointer TlsAlloc TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter GetStringTypeW GetCPInfo GetOEMCP GetACP IsValidCodePage WriteFile GetStdHandle GetSystemTimeAsFileTime AreFileApisANSI GetProcAddress GetModuleHandleExW RtlUnwind EncodePointer OutputDebugStringW IsDebuggerPresent VirtualFree VirtualAlloc IsProcessorFeaturePresent InterlockedPushEntrySList InterlockedPopEntrySList InitializeSListHead LockResource TlsFree GetStartupInfoW GetModuleHandleW LoadLibraryExW FlushFileBuffers GetConsoleCP GetConsoleMode TlsSetValue GetFileType ReadFile SetFilePointerEx GetTimeZoneInformation QueryPerformanceCounter GetCurrentProcessId InterlockedDecrement GetEnvironmentStringsW FreeEnvironmentStringsW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW SetEnvironmentVariableA SetStdHandle WriteConsoleW ReadConsoleW CreateFileW SetEndOfFile TlsGetValue CreateDirectoryW

user32

GetDesktopWindow SetWindowLongW FillRect GetSysColor LoadCursorW ClientToScreen GetParent MessageBoxA GetClientRect GetWindowTextLengthW GetWindowTextW SetWindowTextW GetClassNameW GetWindow MessageBoxW CreateDialogIndirectParamW EndDialog GetSystemMetrics GetWindowRect SetWindowContextHelpId MapDialogRect LoadStringW GetMessageW TranslateMessage DispatchMessageA PostThreadMessageW SetTimer KillTimer ScreenToClient RedrawWindow InvalidateRgn InvalidateRect EndPaint BeginPaint ReleaseDC GetDC UpdateWindow DestroyAcceleratorTable CreateAcceleratorTableW ReleaseCapture SetCapture GetFocus SetFocus CharNextW SendDlgItemMessageW GetDlgItem SetWindowPos MoveWindow ShowWindow DestroyWindow IsChild IsWindow CreateWindowExW GetClassInfoExW RegisterClassExW UnregisterClassW CallWindowProcW DefWindowProcW SendMessageW RegisterWindowMessageW PostMessageW GetWindowLongW

gdi32

SelectObject GetStockObject GetDeviceCaps DeleteObject BitBlt CreateCompatibleBitmap CreateCompatibleDC GetObjectW DeleteDC CreateSolidBrush

advapi32

RegQueryValueExW RegQueryInfoKeyW RegOpenKeyExW RegEnumKeyExW RegCreateKeyExW RegCloseKey RegSetValueExW

shell32

SHGetFolderPathW ShellExecuteW

ole32

CoGetClassObject CLSIDFromString CLSIDFromProgID StringFromGUID2 CoTaskMemAlloc CoTaskMemFree OleInitialize OleUninitialize OleLockRunning CreateStreamOnHGlobal CoInitialize CoUninitialize CoAddRefServerProcess CoReleaseServerProcess CoCreateInstance

oleaut32

DispCallFunc VariantCopy SysAllocStringByteLen SysStringByteLen OleCreateFontIndirect LoadRegTypeLi LoadTypeLi VariantClear VariantInit SysStringLen SysAllocStringLen SysFreeString SysAllocString

urlmon

URLDownloadToFileW

iphlpapi

GetAdaptersInfo