jaffacakes118_Trojan[.]Win32[.]Swizzor[.]d[.]02bde761cecc0e954a4446d7095b7bae

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Swizzor.d.02bde761cecc0e954a4446d7095b7bae
Size 304KB
Sample261014-mpff3abx2x
SHA256 fe794ddc890f7d377413b423b4672b176d9095552321bc35dc33e57ae0cc7ef1
MD5 02bde761cecc0e954a4446d7095b7bae
SHA1 cd6da82999b345152b2e04ecfb4f669c8e2a32f8
SHA512 17dda2895bd41dd3a9c6f638c859c602e859caa340cbc019cc8c05cde6e3668f68e178bf893f65ca8b3840433bb9bae9eeb0ca60ac73980a29ec14e6139e461e
SSDEEP 6144:2OQGsoBlf+MafPWdmZfEy87kxm3hmWvpPST9qLpQU:2OFsmlQWs9L8aOPC9qFQU
TLSH
T17F64B01262F4C576F5A3237C98369AB25539F8308B36D247B7881F2EEE707C08A1575B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Swizzor.d.02bde761cecc0e954a4446d7095b7bae

File Explorer

jaffacakes118_Trojan.Win32.Swizzor.d.02bde761cecc0e954a4446d7095b7bae

.exe 304KB

jaffacakes118_Trojan.Win32.Swizzor.d.02bde761cecc0e954a4446d7095b7bae

IMPHASH d255f49b3b459e12701dd1780975e0e6
SHA256 fe794ddc890f7d377413b423b4672b176d9095552321bc35dc33e57ae0cc7ef1
MD5 02bde761cecc0e954a4446d7095b7bae
SHA1 cd6da82999b345152b2e04ecfb4f669c8e2a32f8
SHA512 17dda2895bd41dd3a9c6f638c859c602e859caa340cbc019cc8c05cde6e3668f68e178bf893f65ca8b3840433bb9bae9eeb0ca60ac73980a29ec14e6139e461e
SSDEEP 6144:2OQGsoBlf+MafPWdmZfEy87kxm3hmWvpPST9qLpQU:2OFsmlQWs9L8aOPC9qFQU
TLSH
T17F64B01262F4C576F5A3237C98369AB25539F8308B36D247B7881F2EEE707C08A1575B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

81900

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\k

shlwapi

PathAddBackslashA PathFindFileNameA PathFindExtensionA PathAppendA PathStripToRootA PathIsUNCA PathSkipRootA

mfc42

ord1576

ole32

CoUninitialize GetRunningObjectTable CoInitialize CreateClassMoniker

shell32

DragQueryFileA ExtractIconExA ShellExecuteExA

advapi32

CloseServiceHandle RegOpenKeyExA OpenSCManagerA RegQueryValueA RegQueryInfoKeyA GetTokenInformation LookupPrivilegeValueA CreateServiceA RegDeleteKeyA RegSetValueExA InitializeSecurityDescriptor RegOpenKeyA OpenServiceA RegQueryValueExA RegCreateKeyA FreeSid OpenProcessToken DeleteService AdjustTokenPrivileges RegEnumValueA SetSecurityDescriptorDacl RegEnumKeyExA ControlService RegCloseKey RegDeleteValueA RegEnumKeyA RegCreateKeyExA AllocateAndInitializeSid GetUserNameA OpenThreadToken

kernel32

EnterCriticalSection InitializeCriticalSectionAndSpinCount WriteConsoleA IsDebuggerPresent GetFileType TlsFree WriteFile UnhandledExceptionFilter TerminateProcess WaitForSingleObject GetDateFormatA GetConsoleMode GetModuleHandleW VirtualQuery LoadLibraryA GetStringTypeW SetEnvironmentVariableA GetCommandLineA HeapAlloc HeapSize GetEnvironmentStrings SetHandleCount WideCharToMultiByte TlsSetValue ExitProcess GetCPInfo FreeEnvironmentStringsA CompareStringW CompareStringA GetProcAddress MultiByteToWideChar TlsAlloc GetTimeFormatA GetConsoleOutputCP GetACP GetCurrentThreadId GetModuleHandleA GetStringTypeA LCMapStringA FreeEnvironmentStringsW SetStdHandle VirtualFree HeapReAlloc SetFilePointer GetOEMCP CreateFileA SetUnhandledExceptionFilter GetLastError HeapCreate DeleteCriticalSection GetStartupInfoA InterlockedDecrement GetEnvironmentStringsW InterlockedExchange GetCurrentProcess GetCurrentProcessId CloseHandle RaiseException GetConsoleCP IsValidCodePage SetLastError RtlUnwind Sleep HeapFree GetCommandLineW InitializeCriticalSection GetLocaleInfoA TlsGetValue QueryPerformanceCounter WriteConsoleW CreateMutexA InterlockedIncrement LeaveCriticalSection GetTimeZoneInformation GetModuleFileNameA ReadFile GetSystemTimeAsFileTime GetTickCount GetStdHandle VirtualAlloc FlushFileBuffers LocalFree LCMapStringW

comctl32

CreatePropertySheetPageW PropertySheetW ord17 ImageList_GetImageCount ImageList_GetIconSize ImageList_ReplaceIcon InitCommonControlsEx ImageList_AddMasked ImageList_GetImageInfo CreateStatusWindowW

gdi32

CloseEnhMetaFile Rectangle Escape ArcTo SetAbortProc CreateRoundRectRgn PatBlt FillRgn CreateSolidBrush GetBkColor FrameRgn GetCharABCWidthsA GetAspectRatioFilterEx GetCharABCWidthsFloatA FloodFill GetROP2 UpdateColors RoundRect DPtoLP PolyBezier CreateCompatibleDC SetArcDirection GetMapMode GetObjectA SetColorAdjustment GetKerningPairsA SetBitmapBits DrawEscape DeleteMetaFile GetPixel ExtCreateRegion DeleteDC MaskBlt Arc SetViewportExtEx GetCurrentObject MoveToEx ExtSelectClipRgn SetBkMode SetTextColor GetClipBox GetCurrentPositionEx PtVisible SetViewportOrgEx CreateEnhMetaFileA SetMapMode EqualRgn IntersectClipRect Chord CreatePolygonRgn GetObjectType SelectClipPath CombineRgn GetColorAdjustment GetTextAlign PolyPolygon GetCharWidthFloatA CreateFontIndirectA StartDocA ExtFloodFill AbortPath ExtEscape StretchBlt PlgBlt AbortDoc ScaleViewportExtEx PlayMetaFileRecord EnumMetaFile GetBrushOrgEx ScaleWindowExtEx SelectClipRgn GetCharWidthA PaintRgn GetTextColor CreateRectRgn PtInRegion WidenPath GetStretchBltMode CopyMetaFileA GetFontData SetBkColor CreateBitmap GetOutlineTextMetricsA CreateDIBPatternBrushPt Polyline OffsetRgn CloseFigure RealizePalette OffsetClipRgn SetPixelV CreateBrushIndirect GetPolyFillMode GetArcDirection SetPaletteEntries CreatePolyPolygonRgn PolylineTo AnimatePalette GetWindowExtEx SetROP2 StrokePath CreateBitmapIndirect GetTextFaceA GetDeviceCaps CreateDiscardableBitmap GetTextCharacterExtra CreatePenIndirect GetRgnBox CreateDCA DeleteObject OffsetWindowOrgEx TextOutA GetDCOrgEx Polygon SetPolyFillMode CreateFontA ResizePalette PolyDraw GdiComment CreateCompatibleBitmap PathToRegion EnumObjects RectInRegion GetMiterLimit PlayMetaFile GetClipRgn SetMiterLimit CreatePen CreateHalftonePalette SetWindowOrgEx CreateRectRgnIndirect AngleArc SetMapperFlags LineTo RectVisible

user32

DestroyIcon DefWindowProcA UpdateWindow LoadBitmapA RegisterClassExA GetDlgItem RemovePropA FindWindowA ReleaseDC LoadStringA GetClassInfoA EndPaint PeekMessageA SetRectEmpty ScreenToClient GetWindowPlacement PtInRect LoadAcceleratorsA SetCapture BeginPaint RegisterClassA CheckMenuItem GetParent ReleaseCapture SetActiveWindow CharNextA ShowWindow MoveWindow DestroyAcceleratorTable RedrawWindow UnregisterClassA MessageBoxA FillRect CreateWindowExA CreateMenu DestroyWindow LoadIconA SetWindowLongA RegisterClipboardFormatA LoadCursorA IsWindowVisible InvalidateRect

version

GetFileVersionInfoA GetFileVersionInfoSizeA