jaffacakes118_not-a-virus[.]AdWare[.]Win32[.]Wajam[.]eq[.]bd9818432af58c221264c39290a5fca0

General

Target
jaffacakes118_not-a-virus.AdWare.Win32.Wajam.eq.bd9818432af58c221264c39290a5fca0
Size 1.2MB
Sample261015-2p5taatshs
SHA256 019f908cf219af59e1957182a68506abb163b7446873b1fa24c0db2e66b32d94
MD5 bd9818432af58c221264c39290a5fca0
SHA1 7555e1213d15efa8707575a672c0b361651dc2be
SHA512 fe48d925637194e27a0999682bd9644ee9e95b8aa71cac09f68a14045c3709cba424341cb5329fd7cc863122a1e49ea6ecabf9affe4e4515cdb2e28436004c29
SSDEEP 24576:MFEEv6MVmXZ5UMROu/1mIiSmQBcyDBgkTKAD9h:MFP6MVcZaMROuN/CK9tgkTtL
TLSH
T1FE454A20B711C57ACA9E02F16D7CAE1E602D6AE60B6448C7E7CCAEDD28754C35333A57
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_not-a-virus.AdWare.Win32.Wajam.eq.bd9818432af58c221264c39290a5fca0

File Explorer

jaffacakes118_not-a-virus.AdWare.Win32.Wajam.eq.bd9818432af58c221264c39290a5fca0

.dll 1.2MB

jaffacakes118_not-a-virus.AdWare.Win32.Wajam.eq.bd9818432af58c221264c39290a5fca0

IMPHASH bd0d34a9ffe0fb16c089440e6827e72d
SHA256 019f908cf219af59e1957182a68506abb163b7446873b1fa24c0db2e66b32d94
MD5 bd9818432af58c221264c39290a5fca0
SHA1 7555e1213d15efa8707575a672c0b361651dc2be
SHA512 fe48d925637194e27a0999682bd9644ee9e95b8aa71cac09f68a14045c3709cba424341cb5329fd7cc863122a1e49ea6ecabf9affe4e4515cdb2e28436004c29
SSDEEP 24576:MFEEv6MVmXZ5UMROu/1mIiSmQBcyDBgkTKAD9h:MFP6MVcZaMROuN/CK9tgkTtL
TLSH
T1FE454A20B711C57ACA9E02F16D7CAE1E602D6AE60B6448C7E7CCAEDD28754C35333A57
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

1

Major OS version

5

Entry point

702248

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

wajam_goblin.pdb

kernel32

IsWow64Process QueryInformationJobObject GetLastError CloseHandle GetCurrentProcess GetModuleHandleW SetThreadPriority CreateFileW ReadFile GetExitCodeThread WaitForSingleObject TerminateThread OpenEventW CreateEventW SetEvent ResetEvent FreeLibrary GetSystemTimeAsFileTime CreateEventA GetNativeSystemInfo InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection TlsAlloc InterlockedIncrement InterlockedExchange InterlockedDecrement InterlockedExchangeAdd InitializeCriticalSectionAndSpinCount WaitForMultipleObjects QueueUserAPC SleepEx PostQueuedCompletionStatus CreateIoCompletionPort SetWaitableTimer GetQueuedCompletionStatus InterlockedCompareExchange SetLastError TlsGetValue TlsSetValue TlsFree HeapReAlloc HeapAlloc HeapFree RaiseException DecodePointer FileTimeToSystemTime GetModuleFileNameW GetCurrentProcessId OpenProcess GetModuleHandleExW CreateThread GetCurrentThreadId GetProcAddress FreeLibraryAndExitThread Sleep LoadLibraryW EncodePointer OpenEventA FormatMessageA WideCharToMultiByte MultiByteToWideChar GetStringTypeW LoadLibraryExA IsProcessorFeaturePresent GetCommandLineA GetCPInfo ExitThread LoadLibraryExW IsDebuggerPresent ExitProcess AreFileApisANSI FileTimeToLocalFileTime GetFileInformationByHandle GetFileType PeekNamedPipe GetConsoleMode ReadConsoleW SetFilePointerEx WriteFile GetConsoleCP RtlUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess GetStartupInfoW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapSize GetProcessHeap GetCurrentThread IsValidCodePage GetACP GetOEMCP GetStdHandle GetModuleFileNameA QueryPerformanceCounter GetEnvironmentStringsW FreeEnvironmentStringsW FlushFileBuffers SetStdHandle WriteConsoleW OutputDebugStringW GetThreadTimes GetModuleHandleA InitializeSListHead GetTimeZoneInformation SetEndOfFile SetEnvironmentVariableA

advapi32

RegCloseKey RegOpenKeyExW

Sharing