jaffacakes118_not-a-virus[.]WebToolbar[.]Win32[.]Widgi[.]ar[.]18143afaad1bc59e1a03d783d505374f

resource
jaffacakes118_not-a-virus.WebToolbar.Win32.Widgi.ar.18143afaad1bc59e1a03d783d505374f

jaffacakes118_not-a-virus.WebToolbar.Win32.Widgi.ar.18143afaad1bc59e1a03d783d505374f

IMPHASH 32f3282581436269b3a75b6675fe3e08
SHA256 15043baef8721dc93875dd3f4e8e7051f084d1c2d56fa7e289354eeb0f22808c
MD5 18143afaad1bc59e1a03d783d505374f
SHA1 34735b87a510d068dc8f607b6f99f7312d682139
SHA512 34baea38986c2be1dda54aa0616bbd3a1a04cb73a4fb521085591ed24906e2b5ac4822058a2175b077632d965ab47b749edeaddbc7b7eb92a6535f33ab83058b
SSDEEP 24576:RLK4mUNlcGcjvS8xEMc5ndFVoASLd/yde+Q0pG:ARUzcG+xMqhJ/gGt
TLSH
T10A05232097E4D9E3F1E72EB12C342A11AE756F6014BCC50B9B018CEDBA66A36153DF53
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

5

Entry point

14819

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

SetFileTime CompareFileTime SearchPathW GetShortPathNameW GetFullPathNameW MoveFileW SetCurrentDirectoryW GetFileAttributesW GetLastError CreateDirectoryW SetFileAttributesW Sleep GetTickCount CreateFileW GetFileSize GetModuleFileNameW GetCurrentProcess CopyFileW ExitProcess GetWindowsDirectoryW GetTempPathW GetCommandLineW SetErrorMode CloseHandle lstrlenW lstrcpynW GetDiskFreeSpaceW GlobalUnlock GlobalLock CreateThread LoadLibraryW CreateProcessW lstrcmpiA GetTempFileNameW lstrcatW GetProcAddress LoadLibraryA GetModuleHandleA OpenProcess lstrcpyW GetVersionExW GetSystemDirectoryW GetVersion lstrcpyA RemoveDirectoryW lstrcmpA lstrcmpiW lstrcmpW ExpandEnvironmentStringsW GlobalAlloc WaitForSingleObject GetExitCodeProcess GlobalFree GetModuleHandleW LoadLibraryExW FreeLibrary WritePrivateProfileStringW GetPrivateProfileStringW WideCharToMultiByte lstrlenA MulDiv WriteFile ReadFile MultiByteToWideChar SetFilePointer FindClose FindNextFileW FindFirstFileW DeleteFileW lstrcpynA

user32

GetAsyncKeyState IsDlgButtonChecked ScreenToClient GetMessagePos CallWindowProcW IsWindowVisible LoadBitmapW CloseClipboard SetClipboardData EmptyClipboard OpenClipboard TrackPopupMenu GetWindowRect AppendMenuW CreatePopupMenu GetSystemMetrics EndDialog EnableMenuItem GetSystemMenu SetClassLongW IsWindowEnabled SetWindowPos DialogBoxParamW CheckDlgButton CreateWindowExW SystemParametersInfoW RegisterClassW SetDlgItemTextW GetDlgItemTextW MessageBoxIndirectW CharNextA CharUpperW CharPrevW wvsprintfW DispatchMessageW PeekMessageW wsprintfA DestroyWindow CreateDialogParamW SetTimer SetWindowTextW PostQuitMessage SetForegroundWindow ShowWindow wsprintfW SendMessageTimeoutW LoadCursorW SetCursor GetWindowLongW GetSysColor CharNextW GetClassInfoW ExitWindowsEx IsWindow GetDlgItem SetWindowLongW LoadImageW GetDC EnableWindow InvalidateRect SendMessageW DefWindowProcW BeginPaint GetClientRect FillRect DrawTextW EndPaint FindWindowExW

gdi32

SetBkColor GetDeviceCaps DeleteObject CreateBrushIndirect CreateFontIndirectW SetBkMode SetTextColor SelectObject

shell32

SHBrowseForFolderW SHGetPathFromIDListW SHGetFileInfoW ShellExecuteW SHFileOperationW SHGetSpecialFolderLocation

advapi32

RegEnumKeyW RegOpenKeyExW RegCloseKey RegDeleteKeyW RegDeleteValueW RegCreateKeyExW RegSetValueExW RegQueryValueExW RegEnumValueW

comctl32

ImageList_AddMasked ImageList_Destroy ord17 ImageList_Create

ole32

CoTaskMemFree OleInitialize OleUninitialize CoCreateInstance

version

GetFileVersionInfoSizeW GetFileVersionInfoW VerQueryValueW

Name

.text

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

11KB

Virtual Size

10KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.ndata

Size

Virtual Size

2.5MB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

.data

SHA256 6db33451a2c8a909671725fe9d9e735e8c3bc704954f014503d33963aca37551
MD5 db9f7acbf1c3ddfe255077b699955dfa
SHA1 53188fc5923c982a5f95f3d84c9e65d33d887d59
SHA512 7169bcccfe5869076187e56e8aa18cb0a3a88f2a626f0193dee93b7850f85b5bb2dafa22d67a0241242fb1173ed2715e5590bc0b23440c8cb5502a0ad956170d
TLSH
T1E8F092023AE3A0AAF0400D3DACA441C01281BC986B115C0A27A4368D76F21120E29306
MD5 SHA1 SHA512 TLSH

.rdata

SHA256 e0f96857d54993cd0a9a734ab76698d270a5311129cc442a3344bb196b9afe4a
MD5 91eee43954e068e650f7b73a8b0e6915
SHA1 b547eb6e6cac33ee3733ac68385899629a5e5f17
SHA512 a5e9bdd0f09e6d721e16a29a95624de9b8a5e1c51394475f6a8514f1714a159604acbc256e44c0f7a6e53c7f4808c4fe7fcc9c2b32fdd7be2699e788efc77094
SSDEEP 192:Kb1IorPNhTsBQFOs43y3pE7JRWVS7yWymPn:KbiaPbMQFH43y3pKrWVaymPn
TLSH
T14C32DA419BFC018AFAF32FB23D76495509B2BC515835D01D6208DC8E3DB6A56C9B8B72
MD5 SHA1 SHA512 SSDEEP TLSH

.reloc

SHA256 78c55bca1c5bf49a8d30297ec40a18ffc4b9c4b3991d570be005047f3970b381
MD5 e2b1dd41be7f0ea9ad4f7d6539a3789e
SHA1 cee21fbe34a74794c4f41e827e739cfd985749b9
SHA512 d7361cdb3c4bd09d83d57286f19bcaaa852f2aeea0336e8071eef09059c8d843e06599864d7e5e8d36583e9e6402455b10f23e400be5b683126bbe1404c64dbf
TLSH
T132810A6AA8891C79EAB8007D634E7B1357CE9361FD6A67AD086309D144602851F8A753
MD5 SHA1 SHA512 TLSH

.rsrc/0/version.txt

SHA256 29614ca9d1af915f9d63bc84d20618f4d9217431f9b593d1ef9f2d63aac54253
MD5 7a241a6a44921b7ef88b2413be0dbbbb
SHA1 2310f2db6591a6aff1109aa43722cda426117902
SHA512 fac9df51b401a54b8fe6b920106d274031bd5f26050c563aa36d787c4f49929e875b030430a1e87c2460bf53a14c13c5dd9db00d46055e180e287c8d5a545648
TLSH
T15121E20B96FB3198A0B7BA899EDA8C3603573810093DE25E98CC7E4D4FD70041912BF3
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/105

SHA256 fecdb955f8d7f1c219ff8167f90b64f3cb52e53337494577ff73c0ac1dafcd96
MD5 3409f314895161597f3c395cc5f65525
SHA1 1a99d016d65e567f24449d9362afb6ac44006d0b
SHA512 f3e7394fa49325a7ea46728b77a5e819e18d63049d54c6adf36d08619709484f8bbd20206416d3c1440bd70632d99d9a45f3488482353f90aa21aa6ee3915427
TLSH
T106D00218A3A6CA1BE429DA7DAAE3C3A71432F8045816450BB986F30F5970A91FE59D41
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/106

SHA256 69897c784f1491eb3024b0d52c2897196a2e245974497fda1915db5fefcf8729
MD5 2d12c45dc2c029044aaff357141cb900
SHA1 083db861ab3c7db23c6257878296e73a89a74b8b
SHA512 a50dcf605a914f0a6f94b3f815be159c2b729d005a25d6cc9120c4d34445cae2d0b20df3dbdc7672f316010c6a47079265548a1ed5a523896963b1a3ddf98a17
TLSH
T168D0224846E0C408F4365C3894B1CAF22A1478490D00A58BBDE813AB4020C00FAF7202
MD5 SHA1 SHA512 TLSH

.rsrc/1033/DIALOG/111

SHA256 85025c8556952f6a651c2468c8a0d58853b0ba482be9ad5cd3060f216540dfc0
MD5 6be4e1387d369cf86e68eacbdd0e81dd
SHA1 351970fe2681b9b35b5d59ad052011ed96a96e17
SHA512 b81b287de73282cc5a7337559fbce5af01d1a440f04ee97c6a8e1de0c787ef38936c951b802014b841fc517fe7f2b916266dc8c35cd5de1ad0c630dc2218fa81
TLSH
T1C4B002A043B9C10FE5155972BE7AD5B65111F80054345A0BBB64634F1810DC5CF49287
MD5 SHA1 SHA512 TLSH

.rsrc/1033/GROUP_ICON/103

SHA256 a0c9d012e2bf6b2fe05c2d97cb5594d97cf2f539e97935c12abd7a3562f4d9bf
MD5 42cf62b780813706e75fb9f2b2e8c258
SHA1 a022d5c1cfdd8aace0089f3e72f2eedd41bda464
SHA512 1639fc29db22cba1324e7ea533ae9e827a1e21e224ba89c85abd14b8b139832c4b3ac37cbcbbe6060192c7634143702259e43b483579b2b6848415ffa06f2798
MD5 SHA1 SHA512

.rsrc/1033/ICON/1.ico

SHA256 dbca06e4966ff7d0439e285fe34a25a8e448c8977d387d52ad79622b96d07f96
MD5 fed01325b9c85dd8599366f2888f496e
SHA1 1252c1c98bbc898dfc20ff81d8d94a5d198a824c
SHA512 9fb23aa9682c276a3dc10d74388f663f4cfbd6e1ccaba7a78e29db68e6538dbb1a025f4166538dfbef12fa0e156bfedef1bf592f6a022134e0742144781c3378
TLSH
T15C018B1DB542859FE4080632CE7387E5597D2C296E34052E57E0AF1B2DB168124965FD
MD5 SHA1 SHA512 TLSH

.rsrc/1033/MANIFEST/1

SHA256 ef9c9196e13cb437adc365a9b8f4ffc0830f094ad644ad696c0e3c57ca826cf3
MD5 2f2a01087bfe7c154458ef5bd0ba153a
SHA1 9f2aa95c50b0fd20e6563741e9cbe368c11b8643
SHA512 eeea50f893b8d21109c165323759f6cd78ad525cad866d0efef8bac44cbe8b42fbdce83d08fd18131e901a411964264a96fac1da0170eda6219faa4e2d43abee
TLSH
T1C70110D1C008946AF34102B32A31F50D147AA72F08CC46FCD8C74E3EA207BCA86531C1
MD5 SHA1 SHA512 TLSH

.text

SHA256 43b1b548befd5d2a4638048c6f234cbb66fa07c1fd709bbc3e73bb4d642da595
MD5 f569e353af0ed51bf4c216faa9bed4e7
SHA1 6a44a12f5af7cce9abbd9cd636f52401b2120209
SHA512 99a4dd6ce87567c9171f80d71f28f7246df1295f209fbf01017566d67177b3d5c52538be7615f91f2f609fd9bf83e8dc4b6d8fbaaa6be0f941abd1f02bc55af6
SSDEEP 768:Z8vqCBTTe9S4fmlp2XyTYgWy6CWuLBBENw1D1l7KVhmEGy:mVdePelp2Xy+tuQOzOYE5
TLSH
T1CDD29F429561D0B7CDE20AF206A16A93FFB7C62604F1ED93D7401F8D3A239C6E91D84B
MD5 SHA1 SHA512 SSDEEP TLSH

CERTIFICATE

SHA256 a207edf2b5d02281977b17d6890b9747d67d4b52e8a3657f4ccdc6e20fb0d04b
MD5 916047f36f800dbd8e31cad6068a1547
SHA1 5400f29f9770a5b2ebb85562b7ef4c320436543d
SHA512 881152d095f00db3ca2c03deeee588b3d6aaae5506224b862783bd9b85d3b74ac3e295873b86b9366015909b9bf3415c0fb8efd1b6ad530033ada32af737d3af
TLSH
T10161D4E37A48A0A1FE8A9F85B1FCC667DC351BAA3F890447F44388800AF639064648CC
MD5 SHA1 SHA512 TLSH

[0]

SHA256 82e99ebfce062fb6aacd5fb1e928ff80844518071ff09a42f485d11d2829af3e
MD5 537deefeb1b7e1326b0ba292f36fae1d
SHA1 775f364f11b164cf57c6023189bcf25be5dc9aa6
SHA512 c4ab0f8b068804db12058866df693f839954f74ee9ab2fd4512690247186dbe32220351858c11b8920fbb9894c154ff62b50ce6409b933c66cf9ea26234a71e6
TLSH
T1C51154273A9759B340303B5DB6B97F44150F97C1D47068D3782246F5C337A91358C42B
MD5 SHA1 SHA512 TLSH

[1]

SHA256 77ff241162386c7bab723c1d03b08107ec5318c2f5ce5cbdfb01d19e1a59ad84
MD5 f2d748d8b344a64bfd707a157b00ac6d
SHA1 dff9ab02365c50c913aa094b079af3cedc46bc73
SHA512 23aa4d5dc7adb442e511fc202d83b6dcb08f320d89536f4ef9ee23c4756dae41a2b2521cc011e00d9c90a9fa7fc76b866155e0d8da2684b12153746fe6d7fe0b
SSDEEP 24576:24mUNlcGcjvS8xEMc5ndFVoASLd/yde+Q0pl:2RUzcG+xMqhJ/gGu
TLSH
T172F43334A6E1EFD2218F34756C2C3964FA440BF025AC8A139D0618FDD79DE3A167EC96
MD5 SHA1 SHA512 SSDEEP TLSH

Sharing

General

Malware Config

Signatures

File Explorer