jaffacakes118_Trojan[.]Win32[.]Swizzor[.]d[.]71afea6319f4975dbb6e6f1322c21c01

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Swizzor.d.71afea6319f4975dbb6e6f1322c21c01
Size 796KB
Sample261014-mpj49aff58
SHA256 6defc967ffd68f37a6bf2c4944a3ebfe0b20b951e61fb56ecf6c7917ab524b3f
MD5 71afea6319f4975dbb6e6f1322c21c01
SHA1 34ef1a4dad8b0164f4735ff7b998a58be1bdf7f4
SHA512 57b948a9257d79f2bfcfcffc96407a955eff72d82d56589096516e295718b0563159b8a3dd1033b3c26b302a48509b30556f724ca59db246d7384c6dde02370c
SSDEEP 24576:SjJ7GQsj2bOET8kA0LPVKwkcwlXsj7n+0000000500000b000000m0000I00000a:O7GQsjyAV0P0cn0
TLSH
T13D05DF727A70C077E4F85834F741EE308696B72D74235EDB77F40A2A7A849C1252E3A9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Swizzor.d.71afea6319f4975dbb6e6f1322c21c01

File Explorer

jaffacakes118_Trojan.Win32.Swizzor.d.71afea6319f4975dbb6e6f1322c21c01

.exe 796KB

jaffacakes118_Trojan.Win32.Swizzor.d.71afea6319f4975dbb6e6f1322c21c01

IMPHASH 8cea47740f57619b53e11b9c67d5ae55
SHA256 6defc967ffd68f37a6bf2c4944a3ebfe0b20b951e61fb56ecf6c7917ab524b3f
MD5 71afea6319f4975dbb6e6f1322c21c01
SHA1 34ef1a4dad8b0164f4735ff7b998a58be1bdf7f4
SHA512 57b948a9257d79f2bfcfcffc96407a955eff72d82d56589096516e295718b0563159b8a3dd1033b3c26b302a48509b30556f724ca59db246d7384c6dde02370c
SSDEEP 24576:SjJ7GQsj2bOET8kA0LPVKwkcwlXsj7n+0000000500000b000000m0000I00000a:O7GQsjyAV0P0cn0
TLSH
T13D05DF727A70C077E4F85834F741EE308696B72D74235EDB77F40A2A7A849C1252E3A9
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

107014

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

f:\mpeeld\ocoe\luiscatl\xye\asuizpece.pdb

advapi32

RegEnumKeyA RegEnumKeyExA RegCreateKeyExA RegSetValueExA RegDeleteKeyA QueryServiceStatus OpenServiceA RegCloseKey StartServiceA RegOpenKeyExA OpenSCManagerA DeleteService RegDeleteValueA CloseServiceHandle RegOpenKeyA InitializeSecurityDescriptor GetUserNameA OpenProcessToken AllocateAndInitializeSid RegQueryValueA AdjustTokenPrivileges SetSecurityDescriptorDacl RegQueryValueExA ControlService ChangeServiceConfigA FreeSid CreateServiceA

mfc42

ord1576

kernel32

GetTimeFormatA WriteFile CloseHandle GetCommandLineW FlushFileBuffers InitializeCriticalSectionAndSpinCount GetConsoleCP LoadLibraryA WideCharToMultiByte WriteConsoleW GetCurrentProcessId FreeEnvironmentStringsA SetFilePointer IsValidCodePage CompareStringA VirtualQuery SetStdHandle GetStdHandle InterlockedIncrement CreateFileA GetTickCount WriteConsoleA GetConsoleOutputCP TlsSetValue VirtualAlloc LocalFree WaitForSingleObject ExitProcess EnterCriticalSection TlsGetValue GetSystemTimeAsFileTime LeaveCriticalSection SetLastError TerminateProcess GetStringTypeA GetDateFormatA CreateMutexA GetConsoleMode UnhandledExceptionFilter HeapSize HeapAlloc GetCurrentProcess FreeEnvironmentStringsW VirtualFree SetEnvironmentVariableA IsDebuggerPresent GetStartupInfoA LCMapStringW QueryPerformanceCounter LCMapStringA GetLocaleInfoA TlsFree GetEnvironmentStringsW GetModuleFileNameA SetUnhandledExceptionFilter HeapCreate GetACP Sleep CompareStringW GetCurrentThreadId GetCPInfo GetOEMCP GetStringTypeW ReadFile GetEnvironmentStrings GetFileType GetModuleHandleA DeleteCriticalSection MultiByteToWideChar InterlockedExchange HeapFree GetLastError InterlockedDecrement SetHandleCount GetModuleHandleW GetProcAddress RtlUnwind GetTimeZoneInformation GetCommandLineA TlsAlloc RaiseException HeapReAlloc

comdlg32

GetSaveFileNameA ChooseColorA

comctl32

ImageList_AddMasked ImageList_DragEnter

gdi32

GetBkColor ScaleViewportExtEx SelectClipRgn SetRectRgn CreateDIBitmap LPtoDP GetStockObject MoveToEx RealizePalette GetObjectA BitBlt BeginPath SaveDC PtVisible SetBkMode SelectObject CreateFontW CreateFontIndirectW TextOutW RoundRect CreateCompatibleBitmap CreatePalette CreateRectRgnIndirect SetStretchBltMode SetMapMode StartPage GetPixel SetWindowExtEx ExcludeClipRect ExtFloodFill OffsetViewportOrgEx GetTextMetricsW ExtTextOutA ExtSelectClipRgn SetPixel GetRgnBox GetViewportExtEx GetDeviceCaps GetBkMode CreatePen CreatePatternBrush CreateDIBSection GetObjectW OffsetClipRgn StretchBlt CreateRectRgn DeleteObject RestoreDC GetWindowExtEx EndDoc Polygon GetClipBox CreateSolidBrush CreatePolygonRgn IntersectClipRect ScaleWindowExtEx EndPath EndPage SetROP2 CombineRgn Escape CreateBrushIndirect CreateCompatibleDC Rectangle LineTo FrameRgn SetViewportOrgEx CreateRoundRectRgn GetCurrentObject RectVisible GetTextColor ExtTextOutW CreateBitmap SetTextColor StretchDIBits GetDIBits DeleteDC GetViewportOrgEx

user32

SystemParametersInfoA GetKeyState SetMenuItemBitmaps GetIconInfo DeleteMenu PostThreadMessageA SetCursorPos SetClassLongA ModifyMenuA GetActiveWindow CheckMenuItem GetWindowRect GetWindowTextA LoadIconA LoadStringA SetWindowPos OffsetRect DispatchMessageA GetScrollInfo GetDC GetCursorPos GetSystemMetrics DrawStateA EndPaint CopyImage GetClientRect SetMenuDefaultItem wsprintfA GetClassInfoExA DestroyIcon OpenClipboard TrackPopupMenu LoadCursorA GetWindowPlacement CreateWindowExA IsWindow GetMenu SetFocus GetParent EndDialog DrawFocusRect GetSystemMenu GetMessagePos SetTimer DestroyCursor PeekMessageA LoadBitmapA RegisterClassA DrawMenuBar EnumWindows RegisterClipboardFormatA SendDlgItemMessageA ReleaseCapture ValidateRect SetParent RegisterClassExA ShowScrollBar GetFocus GetNextDlgGroupItem BeginPaint GetWindowDC IsIconic GetDlgCtrlID GetWindowThreadProcessId SetCursor SetForegroundWindow GetDCEx EnableWindow BringWindowToTop MapWindowPoints FillRect GetClassInfoA GetDlgItem