jaffacakes118_not-a-virus[.]AdWare[.]Win32[.]ArcadeWeb[.]bvm[.]9b4a18ccc585d5558bdbc7bd0db72ff0

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_not-a-virus.AdWare.Win32.ArcadeWeb.bvm.9b4a18ccc585d5558bdbc7bd0db72ff0
Size 776KB
Sample261015-2jpj4set8j
SHA256 aba07dfb24fa554a18893e9f55e3469d1d92da97f8661a14bebddfd0035ad603
MD5 9b4a18ccc585d5558bdbc7bd0db72ff0
SHA1 b1ef4515246d8adbd41fddefe8a9be29d7fac742
SHA512 dca410a88a26799e6aa39b7dd2dd9f16fd4b7d406a410b9ac5e4ec6d05e7c093d8a4ac59a6714416c4c4737220a767d2eee9aa74613f65018b2128e9522dbb07
SSDEEP 12288:7XT8m6HINDTrl1Q25KPRBOm7M0g4vVnN8uOpgRrhSHjWk2Oh+NCmVD+ljE3e:7Xgm/tTrlOCqSuD7VN84FKjWrOhGIEu
TLSH
T1DD05123573C0C073E4A7043958F2CB756766B9F40366D593FBCC1EB69F11A92922A38A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.AdWare.Win32.ArcadeWeb.bvm.9b4a18ccc585d5558bdbc7bd0db72ff0

File Explorer

jaffacakes118_not-a-virus.AdWare.Win32.ArcadeWeb.bvm.9b4a18ccc585d5558bdbc7bd0db72ff0

.exe 776KB

jaffacakes118_not-a-virus.AdWare.Win32.ArcadeWeb.bvm.9b4a18ccc585d5558bdbc7bd0db72ff0

IMPHASH 01880f940325d97e6c6b1f746735ee12
SHA256 aba07dfb24fa554a18893e9f55e3469d1d92da97f8661a14bebddfd0035ad603
MD5 9b4a18ccc585d5558bdbc7bd0db72ff0
SHA1 b1ef4515246d8adbd41fddefe8a9be29d7fac742
SHA512 dca410a88a26799e6aa39b7dd2dd9f16fd4b7d406a410b9ac5e4ec6d05e7c093d8a4ac59a6714416c4c4737220a767d2eee9aa74613f65018b2128e9522dbb07
SSDEEP 12288:7XT8m6HINDTrl1Q25KPRBOm7M0g4vVnN8uOpgRrhSHjWk2Oh+NCmVD+ljE3e:7Xgm/tTrlOCqSuD7VN84FKjWrOhGIEu
TLSH
T1DD05123573C0C073E4A7043958F2CB756766B9F40366D593FBCC1EB69F11A92922A38A
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

94283

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

comctl32

InitCommonControlsEx

rpcrt4

UuidToStringA UuidCreate

version

VerQueryValueA GetFileVersionInfoA GetFileVersionInfoSizeA

kernel32

CreateProcessA WinExec GetComputerNameA GetVolumeInformationA GetTickCount GetCurrentProcessId HeapReAlloc SetFilePointer GetModuleHandleA GetCurrentProcess GlobalMemoryStatusEx GetDiskFreeSpaceExA CreateToolhelp32Snapshot Process32First Process32Next OpenProcess TerminateProcess MultiByteToWideChar GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA FlushFileBuffers GetLocaleInfoA HeapSize RtlUnwind QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW GetEnvironmentStrings FreeEnvironmentStringsA WriteConsoleW GetConsoleOutputCP WriteConsoleA SetEndOfFile SetStdHandle IsValidCodePage GetOEMCP GetACP GetCPInfo InitializeCriticalSectionAndSpinCount SetHandleCount VirtualAlloc DeleteCriticalSection VirtualFree HeapCreate InterlockedDecrement GetCurrentThreadId SetLastError InterlockedIncrement TlsFree TlsSetValue TlsAlloc TlsGetValue GetStdHandle RaiseException FreeLibrary WaitForSingleObject CreateThread WritePrivateProfileStringA GetFileAttributesA GetExitCodeProcess SetCurrentDirectoryA GetCurrentDirectoryA Sleep GetTempPathA GetVersionExA ExitProcess CreateMutexA LoadLibraryA GetProcAddress lstrcmpiA lstrcmpA GetPrivateProfileStringA lstrlenA lstrcatA lstrcpynA lstrcpyA HeapFree WriteFile DeleteFileA GetProcessHeap HeapAlloc CreateDirectoryA ReadFile GetFileSize CreateFileA GetModuleFileNameA CloseHandle GetLastError LocalFree LocalAlloc IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetStartupInfoA GetCommandLineA GetConsoleMode GetConsoleCP WideCharToMultiByte GetFileType GetModuleHandleW LeaveCriticalSection EnterCriticalSection GetSystemTimeAsFileTime

user32

CreateWindowExA DefWindowProcA GetWindowLongA GetDC GetClientRect PostQuitMessage SendMessageA GetMessageA DispatchMessageA ExitWindowsEx GetParent LoadIconA RedrawWindow ShowWindow IsWindow SystemParametersInfoA GetWindowTextLengthA CheckRadioButton PostMessageA GetWindowTextA IsDlgButtonChecked GetFocus UpdateWindow SetCursor DestroyWindow LoadCursorA MessageBoxA FillRect GetWindowRect GetDlgCtrlID GetDlgItem EnableWindow SetWindowTextA EndPaint RegisterClassExA GetWindowDC BeginPaint DrawFocusRect SetWindowLongA InvalidateRect ReleaseDC IsDialogMessageA SetForegroundWindow FindWindowA SetFocus TranslateMessage

gdi32

CreateDIBitmap DeleteObject DeleteDC BitBlt GetObjectA CreateCompatibleDC CreateSolidBrush SetBkColor SetTextColor SelectObject TextOutA CreateFontA SetBkMode GetStockObject

advapi32

AllocateAndInitializeSid AdjustTokenPrivileges LookupPrivilegeValueA CheckTokenMembership OpenProcessToken RegCloseKey RegOpenKeyExA RegCreateKeyExA RegSetValueExA RegOpenKeyA RegQueryValueExA RegCreateKeyA FreeSid SetFileSecurityA SetSecurityDescriptorDacl InitializeSecurityDescriptor SetEntriesInAclA

shell32

ShellExecuteExA SHGetFolderPathA ShellExecuteA SHGetSpecialFolderPathA

ole32

CoTaskMemAlloc

shlwapi

PathFileExistsA AssocQueryStringA StrNCatA StrToIntA wnsprintfA StrStrA StrStrIA