jaffacakes118_Trojan[.]Win32[.]Swizzor[.]e[.]ed0ccd31cf299556a53ba1321de94260

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Swizzor.e.ed0ccd31cf299556a53ba1321de94260
Size 720KB
Sample261014-mpr5vstsgx
SHA256 45d823624035f21d19128d697f63b87b24a4e51048852697c1308c32dce1ff6e
MD5 ed0ccd31cf299556a53ba1321de94260
SHA1 d55c63df2d4c6124c52cf477940cb9e230d73157
SHA512 a57e514704be53f6a89b42ac88f48c31ecdfbb3e50154be66cef6a6488a0cdaf18597c4a30e160a443dc7e9e5cbcffb98ecec35eb517cbf0140cf6d30cee32d2
SSDEEP 12288:+8HeIaOFO3rviSanPElFJy+6sR++5LmS7n1qZXe7fr:+8HRQd/J56sh5SS7UO3
TLSH
T1E2F4E07B9E9320B5ECA809315E5205C4416CAFB14E3D4D89B5E86EEA2B65601CF7E333
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Swizzor.e.ed0ccd31cf299556a53ba1321de94260

File Explorer

jaffacakes118_Trojan.Win32.Swizzor.e.ed0ccd31cf299556a53ba1321de94260

.exe 720KB

jaffacakes118_Trojan.Win32.Swizzor.e.ed0ccd31cf299556a53ba1321de94260

IMPHASH f876c3ccd7adf4083763b90d26418884
SHA256 45d823624035f21d19128d697f63b87b24a4e51048852697c1308c32dce1ff6e
MD5 ed0ccd31cf299556a53ba1321de94260
SHA1 d55c63df2d4c6124c52cf477940cb9e230d73157
SHA512 a57e514704be53f6a89b42ac88f48c31ecdfbb3e50154be66cef6a6488a0cdaf18597c4a30e160a443dc7e9e5cbcffb98ecec35eb517cbf0140cf6d30cee32d2
SSDEEP 12288:+8HeIaOFO3rviSanPElFJy+6sR++5LmS7n1qZXe7fr:+8HRQd/J56sh5SS7UO3
TLSH
T1E2F4E07B9E9320B5ECA809315E5205C4416CAFB14E3D4D89B5E86EEA2B65601CF7E333
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4096

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

c:\zevyo\jivpev\vdceoe\rehakxs.pdb

user32

GetTopWindow GetWindowRect SetRect IsWindowUnicode CharUpperA LoadAcceleratorsA MapWindowPoints DestroyAcceleratorTable RemovePropA RegisterClassA GetIconInfo ValidateRect ScreenToClient InflateRect IsZoomed EndDialog SetCaretPos GetSysColorBrush GetDlgItem GetClassNameA GrayStringA SetRectEmpty ReleaseCapture DestroyWindow GetDC IsChild SetActiveWindow LoadIconA TranslateMessage FillRect DrawIconEx SetScrollInfo GetWindow SetWindowLongA TranslateAcceleratorA DispatchMessageA CreateWindowExA IsWindow MessageBoxA DeferWindowPos CreateIconIndirect LoadBitmapA CallWindowProcA UnhookWindowsHookEx GetFocus DestroyCursor GetWindowTextA GetSystemMetrics EndDeferWindowPos EnableWindow AppendMenuA WindowFromPoint IsIconic SetWindowPos GetMenuItemID CreatePopupMenu GetWindowTextLengthA BeginDeferWindowPos ShowWindow GetMenu RegisterClassExA RedrawWindow BeginPaint DefWindowProcA GetClientRect GetParent GetDlgCtrlID RegisterClipboardFormatA CopyRect DrawFocusRect SetWindowRgn GetMessageA SetForegroundWindow GetSysColor ReleaseDC PeekMessageA KillTimer LoadCursorA EndPaint

kernel32

FreeResource SetHandleCount GetEnvironmentStringsW SetFileAttributesA CreateMutexA SetThreadPriority FreeEnvironmentStringsW GlobalUnlock TlsAlloc FlushFileBuffers GetSystemTime SetEnvironmentVariableA GetACP LocalFree GetProcAddress RaiseException WinExec GetFileTime ReadFile lstrlenA VirtualFree CompareStringA GetCommandLineA GetCPInfo GetStringTypeA InitializeCriticalSection CreateThread Sleep SetStdHandle FreeEnvironmentStringsA GlobalAddAtomA EnterCriticalSection FileTimeToLocalFileTime FindClose LoadResource lstrcpynA GetSystemTimeAsFileTime SetEndOfFile GlobalFree FindResourceA TlsGetValue GetStringTypeW VirtualAlloc SetLastError GetModuleFileNameA lstrlenW MultiByteToWideChar IsValidLocale SizeofResource WaitForSingleObject RtlUnwind InterlockedDecrement HeapReAlloc GetDateFormatA SetCurrentDirectoryA ReleaseMutex TerminateProcess lstrcmpA HeapCreate CompareStringW TerminateThread EnumSystemLocalesA GetFileType GetPrivateProfileStringA HeapAlloc DeleteCriticalSection CreateEventA GetPrivateProfileIntA GetLocaleInfoA LockResource HeapFree IsBadReadPtr ExitProcess MulDiv ExitThread GetTempFileNameA GetCurrentProcessId GetFileAttributesA LCMapStringA GlobalSize TlsSetValue InterlockedIncrement GlobalAlloc FileTimeToSystemTime GetSystemDirectoryA GetEnvironmentStrings UnhandledExceptionFilter DeviceIoControl LeaveCriticalSection GetUserDefaultLCID GetTickCount CopyFileW WriteFile ResumeThread SetErrorMode GetLocalTime GetStdHandle GetCurrentThread IsBadCodePtr GetVersion GetModuleHandleA GetThreadLocale GetOEMCP LoadLibraryA SetEvent CreateDirectoryA VirtualProtect SetFilePointer GetLogicalDrives GetExitCodeProcess GetFileSize SetUnhandledExceptionFilter FindNextFileA InterlockedExchange HeapDestroy GlobalFlags LocalAlloc MoveFileA GlobalHandle GetDriveTypeA GetLastError LCMapStringW GetVersionExA GetTimeZoneInformation DuplicateHandle QueryPerformanceCounter CloseHandle VirtualQuery GetStartupInfoA WideCharToMultiByte CopyFileA GetCurrentDirectoryA GetCurrentThreadId CreateFileA lstrcmpW GetCurrentProcess

gdi32

StretchDIBits DeleteMetaFile GdiComment AbortPath DeleteDC DeleteObject WidenPath GetTextFaceA GetRgnBox SetBkColor OffsetWindowOrgEx SetBkMode CreateDiscardableBitmap SelectClipRgn LPtoDP ExtCreateRegion SetMiterLimit GetCharWidthFloatA PlgBlt AnimatePalette GetCharABCWidthsFloatA GetBoundsRect SetStretchBltMode CreatePolyPolygonRgn GetMiterLimit GetWindowExtEx GetBkColor GetObjectA SelectPalette AngleArc ExcludeClipRect BitBlt ExtCreatePen SelectObject DrawEscape CreatePatternBrush Polygon GetBrushOrgEx GetPixel Rectangle GetAspectRatioFilterEx OffsetViewportOrgEx CreateDCA CreateCompatibleBitmap GetViewportOrgEx SetPaletteEntries GetKerningPairsA EnumObjects GetDeviceCaps ExtEscape GetColorAdjustment

comctl32

ImageList_ReplaceIcon ImageList_GetIconSize ImageList_Create ImageList_LoadImageW DestroyPropertySheetPage

shell32

SHGetMalloc ExtractIconA DragFinish SHGetFileInfoA