jaffacakes118_not-a-virus[.]HEUR[.]AdWare[.]Win32[.]Zwangi[.]gen[.]c5d4d5a1cdfdadf7d5dde5d0ac2a9fb2

General

Target
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Zwangi.gen.c5d4d5a1cdfdadf7d5dde5d0ac2a9fb2
Size 576KB
Sample261014-ff7evsywft
SHA256 5d5ea38a2e00bbc0eb50ccceb1e93a1c70d8d3e2a167a8d6dfc1fc9402c5b211
MD5 c5d4d5a1cdfdadf7d5dde5d0ac2a9fb2
SHA1 9edd531018ce3242350da5671aa6e47a1310fa96
SHA512 577e051a5d82ad809d1f52a33db98ea3d636017789b04a94c2ea2e9baf33853860b7b5de621d147463269bca7da66f4713aa068e962dab773142900f058f9323
SSDEEP 12288:9J58Id/czFgCDm8G1B669SuhO9Cyts5Z9yfSwKv+HdA:zR71sety2zJwKmHd
TLSH
T11DC42392D4A281FEF489413220491B7AA773700A57B4ADD71F69E5CEAB733D0E2317C6
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Zwangi.gen.c5d4d5a1cdfdadf7d5dde5d0ac2a9fb2

jaffacakes118_not-a-virus.HEUR.AdWare.Win32.Zwangi.gen.c5d4d5a1cdfdadf7d5dde5d0ac2a9fb2

.dll 576KB

IMPHASH b223e68ced2965391205f88363d68b5b
SHA256 5d5ea38a2e00bbc0eb50ccceb1e93a1c70d8d3e2a167a8d6dfc1fc9402c5b211
MD5 c5d4d5a1cdfdadf7d5dde5d0ac2a9fb2
SHA1 9edd531018ce3242350da5671aa6e47a1310fa96
SHA512 577e051a5d82ad809d1f52a33db98ea3d636017789b04a94c2ea2e9baf33853860b7b5de621d147463269bca7da66f4713aa068e962dab773142900f058f9323
SSDEEP 12288:9J58Id/czFgCDm8G1B669SuhO9Cyts5Z9yfSwKv+HdA:zR71sety2zJwKmHd
TLSH
T11DC42392D4A281FEF489413220491B7AA773700A57B4ADD71F69E5CEAB733D0E2317C6
MD5 SHA1 SHA512 SSDEEP TLSH

Minor OS version

0

Major OS version

4

Entry point

13857

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths