jaffacakes118_Trojan-Downloader[.]Win32[.]Swizzor[.]dyi[.]789334de62c541eb0eeef7304ec53ee8

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan-Downloader.Win32.Swizzor.dyi.789334de62c541eb0eeef7304ec53ee8
Size 388KB
Sample261006-q63jpsfb74
SHA256 ec8581d6b541d5d81a1d308f2cc247af1f58f1cb6e90244c9c94b5f47d33707f
MD5 789334de62c541eb0eeef7304ec53ee8
SHA1 f65e1f67c7712c6a761e1fe53b2497d52ae3c67e
SHA512 40e3ab6bc622b82934955fd782704566fef7edc4c4f22e0b706e3b76c3eef3b6cf8d73234817fcee03f9dbdda1b9af43c99758a08006374d0b3150b95e5c3bfd
SSDEEP 6144:nMlpsVJ6npbZqU3RCcNVLu/rg79sqCCtEOylhXHjKVJ9F:nkpsVJ6p1qU3bLuj8J3yxlhHj
TLSH
T1B984D051FAD1C8B5EE4706B6CA16E366D2323B202C36C557F7A01E1EDEB43D0D826396
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan-Downloader.Win32.Swizzor.dyi.789334de62c541eb0eeef7304ec53ee8

File Explorer

jaffacakes118_Trojan-Downloader.Win32.Swizzor.dyi.789334de62c541eb0eeef7304ec53ee8

.exe 388KB

jaffacakes118_Trojan-Downloader.Win32.Swizzor.dyi.789334de62c541eb0eeef7304ec53ee8

IMPHASH ed7357bbe8d49b9a01ef6b0bb1d24b67
SHA256 ec8581d6b541d5d81a1d308f2cc247af1f58f1cb6e90244c9c94b5f47d33707f
MD5 789334de62c541eb0eeef7304ec53ee8
SHA1 f65e1f67c7712c6a761e1fe53b2497d52ae3c67e
SHA512 40e3ab6bc622b82934955fd782704566fef7edc4c4f22e0b706e3b76c3eef3b6cf8d73234817fcee03f9dbdda1b9af43c99758a08006374d0b3150b95e5c3bfd
SSDEEP 6144:nMlpsVJ6npbZqU3RCcNVLu/rg79sqCCtEOylhXHjKVJ9F:nkpsVJ6p1qU3bLuj8J3yxlhHj
TLSH
T1B984D051FAD1C8B5EE4706B6CA16E366D2323B202C36C557F7A01E1EDEB43D0D826396
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

107393

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

h:\

kernel32

SetStdHandle WaitForMultipleObjects EnumSystemCodePagesA CloseHandle GetLocaleInfoW LocalShrink HeapReAlloc GetVersionExW SetFileAttributesA FreeEnvironmentStringsW HeapFree GetTimeFormatA GetSystemDirectoryA WriteFile lstrcpyW OpenSemaphoreW IsDebuggerPresent InterlockedIncrement WriteConsoleW LoadLibraryA CompareStringA GetDateFormatA SystemTimeToFileTime InterlockedDecrement GetCurrentThreadId GetProcAddress DeleteCriticalSection TerminateProcess LoadLibraryExW FreeEnvironmentStringsA lstrcatW VirtualFree GetACP TlsFree GetConsoleMode GetPrivateProfileIntW MoveFileExW LCMapStringW VirtualProtect GetStringTypeW HeapCreate SetFilePointer SetUnhandledExceptionFilter GetStdHandle GetEnvironmentStrings FlushFileBuffers GetCommandLineA HeapDestroy FindFirstFileExW ReadConsoleOutputA GetModuleHandleA MapViewOfFile SetConsoleWindowInfo GetCPInfo GetCurrentProcessId IsValidCodePage RtlUnwind TlsAlloc EnumDateFormatsA GetModuleFileNameW OpenFile GetConsoleCursorInfo GlobalUnfix GetCommandLineW HeapSize GetStringTypeA CompareStringW CreateMutexA GetConsoleCP RemoveDirectoryA FreeLibrary LockFileEx TlsGetValue SetLocaleInfoW VirtualAlloc IsValidLocale GetVersionExA GlobalHandle SetConsoleCtrlHandler CreatePipe VirtualUnlock CreateMutexW GetProcessHeap GlobalFix GetOEMCP ReadConsoleOutputAttribute GetProfileSectionW EnterCriticalSection FindResourceA WriteProfileStringW Sleep GetFileType lstrcpyn HeapAlloc SetTimeZoneInformation GetConsoleOutputCP GetStartupInfoA WriteConsoleA GetEnvironmentStringsW EnumSystemLocalesA WriteConsoleOutputCharacterW GetTickCount AllocConsole WaitForSingleObjectEx GetThreadLocale SetLastError SetEnvironmentVariableA FlushViewOfFile lstrcpynA lstrcat CreateFileMappingW GetUserDefaultLCID GetModuleFileNameA QueryPerformanceCounter OpenMutexA GetLocaleInfoA SetThreadPriority GetLastError CreateFileA InterlockedExchange DuplicateHandle SetHandleCount TlsSetValue GlobalAddAtomA LCMapStringA VirtualQuery ReadFile LeaveCriticalSection UnhandledExceptionFilter InitializeCriticalSection GetStartupInfoW InterlockedCompareExchange OpenFileMappingW GetSystemTimeAsFileTime OpenEventW ExitProcess WideCharToMultiByte MultiByteToWideChar EnumResourceLanguagesW GetCurrentThread CopyFileExA GetTimeZoneInformation FileTimeToLocalFileTime GetProfileIntW GetCurrentProcess ReadConsoleOutputCharacterW

comctl32

ImageList_GetIcon ImageList_SetIconSize ImageList_Draw DestroyPropertySheetPage ImageList_GetImageInfo CreateStatusWindowW ImageList_EndDrag ImageList_GetFlags InitCommonControlsEx DrawInsert DrawStatusTextW ImageList_LoadImage ImageList_GetDragImage ImageList_GetImageCount ImageList_Merge

comdlg32

ReplaceTextW ChooseFontW GetFileTitleW

user32

OpenIcon CreateMDIWindowW UnionRect GrayStringW IsWindowEnabled InSendMessageEx GetNextDlgTabItem DefWindowProcW ShowCaret SetDlgItemInt RegisterClassExA GetClassNameW GetWindowLongW SetClipboardData BroadcastSystemMessageA DrawEdge CallMsgFilterA OemToCharW MessageBoxExW SetWindowLongA MonitorFromPoint ReplyMessage RegisterClipboardFormatW LoadCursorA SendNotifyMessageW GetMenuCheckMarkDimensions SetDebugErrorLevel RegisterClassA UnpackDDElParam MessageBoxW GetCaretPos WindowFromPoint CreateWindowExW LoadBitmapA GetWindowPlacement SetClassWord EmptyClipboard GetMenuItemID LoadMenuIndirectW GetKeyboardLayoutNameW GetWindowModuleFileNameA DestroyWindow FlashWindow CreateDialogIndirectParamW EnumDisplaySettingsExW ShowWindow GetWindowRgn GetWindowInfo SetMenuItemInfoA OpenInputDesktop GetScrollBarInfo MapVirtualKeyExA GetScrollRange SetRect SetWindowTextW IntersectRect IsDialogMessageW IsMenu GetActiveWindow ScrollDC ScrollWindowEx GetUpdateRect PaintDesktop BroadcastSystemMessageW TabbedTextOutA GetWindowTextLengthA AnyPopup CharLowerBuffA TabbedTextOutW

gdi32

SetLayout RemoveFontResourceA CreateDCW PolyTextOutA EndDoc SetROP2 SetICMProfileA DeleteDC EndPage EnumObjects StretchBlt SelectObject GetObjectA RectInRegion GetStockObject WidenPath CreateEllipticRgnIndirect SetAbortProc CreateColorSpaceA GetDeviceCaps DescribePixelFormat CreateDIBPatternBrushPt ColorCorrectPalette

wininet

InternetUnlockRequestFile InternetConnectW InternetGetLastResponseInfoA InternetGetConnectedStateExA InternetTimeToSystemTime InternetGetCookieA InternetSetCookieW FindFirstUrlCacheContainerA

shell32

SheChangeDirA ShellAboutA