Gen.Variant.Adware.mikey.23699_6486f688f2
Gen:Variant.Adware.mikey.23699 (B) (Emsisoft), Gen:Variant.Adware.mikey.23699 (AdAware)
Behaviour: Adware
The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.
| Requires JavaScript enabled! |
|---|
MD5: 6486f688f230b0040f72695604a2dd9d
SHA1: 80690a401e8dc773adf45a4a2e621f5129d42e6b
SHA256: 34740988da7252bbc61443a17037c0fad855320d700de8c789a246a6b0df5d76
SSDeep: 24576:zv52uVUclACJ1y9hxNn/UPqQpnw9gWmUljgEVT0GejdUw/qZNcjW:r577VaN/AqLcKwpUwIcq
Size: 849920 bytes
File type: EXE
Platform: WIN32
Entropy: Not Packed
PEID: UPolyXv05_v6
Company: .
Created at: 2015-09-07 12:23:37
Analyzed on: Windows7 SP1 32-bit
Summary:
Adware. Delivers advertising content in a manner or context that may be unexpected and unwanted by users. Many adware applications also perform tracking functions. Users may want to remove adware if they object to such tracking, do not wish to see the advertising caused by the program or are frustrated by its effects on system performance.
Payload
No specific payload has been found.
Process activity
The PUP creates the following process(es):
No processes have been created.
The PUP injects its code into the following process(es):
No processes have been created.
Mutexes
The following mutexes were created/opened:
No objects were found.
File activity
No files have been created.
Registry activity
Dropped PE files
There are no dropped PE files.
HOSTS file anomalies
No changes have been detected.
Rootkit activity
No anomalies have been detected.
Propagation
VersionInfo
No information is available.
PE Sections
| Name | Virtual Address | Virtual Size | Raw Size | Entropy | Section MD5 |
|---|---|---|---|---|---|
| .text | 4096 | 707232 | 707584 | 4.57337 | 51824b002956afd2b5c002a64d979108 |
| .rdata | 712704 | 79162 | 79360 | 3.6046 | 18fea71e3fd2db551151d934e2e376e0 |
| .data | 794624 | 44688 | 33280 | 3.44235 | fc2bb4d03943ae1c7199b511c21a3981 |
| .reloc | 839680 | 28280 | 28672 | 4.60747 | a6449d3f35fed1424b4e0aa6f1d0c369 |
Dropped from:
Downloaded by:
Similar by SSDeep:
Similar by Lavasoft Polymorphic Checker:
URLs
No activity has been detected.
IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)
Traffic
Web Traffic was not found.
The PUP connects to the servers at the folowing location(s):
Remove it with Ad-Aware
- Click (here) to download and install Ad-Aware Free Antivirus.
- Update the definition files.
- Run a full scan of your computer.
Manual removal*
- Terminate malicious process(es) (How to End a Process With the Task Manager):No processes have been created.
- Delete the original PUP file.
*Manual removal may cause unexpected system behaviour and should be performed at your own risk.
