jaffacakes118_Trojan[.]Win32[.]Swizzor[.]b[.]0c7e697defdd55447530ae4a5e16a67a

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Swizzor.b.0c7e697defdd55447530ae4a5e16a67a
Size 732KB
Sample261015-1yllbsd17n
SHA256 6ab7dbe239e43a8e1e07cd92e25f49a6791e74d74cb469263a21f1157b6cbe45
MD5 0c7e697defdd55447530ae4a5e16a67a
SHA1 5069a2e7ac84d8be6840702063b8f6625e189d39
SHA512 485e6ec1911f93a53893c8b68cd1320baded1e52493e6b7e5239b3d450187fbefdc7c56b48bba1693ea8a026e27a1dc8160f08061b218f33c5395bcff720e259
SSDEEP 12288:DcJr1wcWmjtEem01wgAAuVqcUXGXCL0xGUjmGCZ/uOiMP:gtomjtEeN1wTVqLGXCMRC5uOik
TLSH
T1B7F4123136E2E0BBE0F3023175365A465635BFA134B987472BA46B8D5EB01C0E73B766
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Swizzor.b.0c7e697defdd55447530ae4a5e16a67a

File Explorer

jaffacakes118_Trojan.Win32.Swizzor.b.0c7e697defdd55447530ae4a5e16a67a

.exe 732KB

jaffacakes118_Trojan.Win32.Swizzor.b.0c7e697defdd55447530ae4a5e16a67a

IMPHASH e4c14f7f95e950720bcb6921b04a209a
SHA256 6ab7dbe239e43a8e1e07cd92e25f49a6791e74d74cb469263a21f1157b6cbe45
MD5 0c7e697defdd55447530ae4a5e16a67a
SHA1 5069a2e7ac84d8be6840702063b8f6625e189d39
SHA512 485e6ec1911f93a53893c8b68cd1320baded1e52493e6b7e5239b3d450187fbefdc7c56b48bba1693ea8a026e27a1dc8160f08061b218f33c5395bcff720e259
SSDEEP 12288:DcJr1wcWmjtEem01wgAAuVqcUXGXCL0xGUjmGCZ/uOiMP:gtomjtEeN1wTVqLGXCMRC5uOik
TLSH
T1B7F4123136E2E0BBE0F3023175365A465635BFA134B987472BA46B8D5EB01C0E73B766
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

76211

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

shell32

DragQueryFileA ShellExecuteW SHGetMalloc ShellExecuteExW DragAcceptFiles SHGetFileInfoW SHFileOperationW SHGetFolderPathW SHGetSpecialFolderPathW DragFinish Shell_NotifyIconA SHCreateDirectoryExW SHBrowseForFolderA ord155 DragQueryFileW ShellExecuteA ExtractIconA SHGetSpecialFolderLocation DragQueryPoint

comctl32

ImageList_Read ImageList_DragShowNolock ImageList_GetBkColor ImageList_Replace ImageList_Draw ImageList_DragEnter ImageList_DragLeave _TrackMouseEvent DestroyPropertySheetPage ImageList_GetImageInfo ImageList_GetImageCount ImageList_SetDragCursorImage ImageList_EndDrag ImageList_Write ImageList_ReplaceIcon ImageList_GetDragImage ImageList_Create PropertySheetA ImageList_Destroy ImageList_AddMasked ImageList_BeginDrag ord17 ImageList_GetIconSize ImageList_SetOverlayImage ImageList_Remove ImageList_GetIcon ImageList_DragMove ImageList_LoadImageA InitCommonControlsEx ImageList_Merge ImageList_Duplicate PropertySheetW ImageList_Add

wsock32

WSACleanup

kernel32

GetStringTypeW GetStringTypeA SetConsoleCtrlHandler LoadLibraryW lstrcpynA FormatMessageW GetSystemTime lstrlenA SetCurrentDirectoryA lstrcmpA GetStdHandle InterlockedDecrement GetEnvironmentStrings GetFullPathNameW SetHandleCount lstrlenW GetPrivateProfileSectionNamesA WriteFile SetFileAttributesA TlsFree _lwrite CreateFileMappingA DuplicateHandle IsValidLocale FlushFileBuffers GetModuleHandleA GetTickCount WriteConsoleA CreateDirectoryA MultiByteToWideChar GetVolumeInformationA GetWindowsDirectoryA GetExitCodeProcess GetTimeFormatA FreeResource MapViewOfFile HeapDestroy Beep GetSystemDirectoryA LCMapStringW GlobalFlags CreateProcessW LocalFileTimeToFileTime FileTimeToSystemTime SystemTimeToFileTime TerminateProcess LocalAlloc FindFirstFileW GetOEMCP GetCPInfo IsDebuggerPresent IsBadWritePtr FindNextFileA GetDiskFreeSpaceA FatalAppExitA GetEnvironmentVariableA SetEndOfFile SetEvent GetCurrentProcessId IsBadCodePtr DeleteFileW InterlockedExchange SetErrorMode GetSystemDirectoryW GetVersion SetEnvironmentVariableA GetTimeZoneInformation SizeofResource GetSystemTimeAsFileTime LoadLibraryA SetLastError InitializeCriticalSection lstrcpyA GetUserDefaultLangID FreeConsole SetStdHandle EnumResourceLanguagesA HeapFree FileTimeToLocalFileTime Sleep MoveFileA VirtualFree LCMapStringA GlobalFindAtomA FindFirstFileA FormatMessageA FreeEnvironmentStringsA CreateThread GetCurrentDirectoryW OpenProcess GetSystemDefaultLangID TlsSetValue DeleteFileA CompareStringW GetVersionExA ExitProcess lstrcmpW RemoveDirectoryW IsValidCodePage GlobalAlloc WaitForMultipleObjects GetACP GetCurrentDirectoryA LockFile CreateMutexA OpenEventA LeaveCriticalSection GetTempPathW TlsAlloc ConvertDefaultLocale GetModuleFileNameW SetCurrentDirectoryW _lread LockResource QueryPerformanceCounter GetFileInformationByHandle lstrcpynW UnlockFile FreeLibrary GetConsoleCP GetTempPathA GetFileType GetDateFormatA HeapSize GetFullPathNameA HeapReAlloc GetComputerNameA WaitForSingleObject GetStringTypeExW EnterCriticalSection GetFileAttributesA VirtualQuery FindClose CreateProcessA WritePrivateProfileStringA RaiseException GlobalDeleteAtom LocalReAlloc GetCommandLineW HeapAlloc MulDiv FreeEnvironmentStringsW GetLocalTime LoadResource GetEnvironmentStringsW DeleteCriticalSection HeapCreate GetProcessHeap ResumeThread WideCharToMultiByte SetThreadPriority FindResourceA PeekNamedPipe GetLocaleInfoW GetPrivateProfileIntA GetFileSize GetPrivateProfileSectionA RtlUnwind ReadFile GetProcAddress GetLocaleInfoA CompareStringA GlobalHandle UnhandledExceptionFilter ExitThread OpenMutexA CloseHandle GlobalGetAtomNameA SetUnhandledExceptionFilter CreateFileA GetConsoleOutputCP GetDriveTypeA IsDBCSLeadByte VirtualProtect IsBadReadPtr LocalFree TlsGetValue GetModuleFileNameA GetVolumeInformationW GlobalReAlloc GetCurrentThreadId GlobalFree CreateEventA GetCurrentProcess FindResourceW TerminateThread GetStartupInfoA GetCurrentThread GetStartupInfoW InterlockedIncrement CreateFileW GetUserDefaultLCID OutputDebugStringA CreateNamedPipeA GetSystemInfo GetLastError VirtualAlloc SetFilePointer SuspendThread EnumSystemLocalesA GetCommandLineA lstrcmpiA GlobalUnlock

user32

GetAsyncKeyState GetForegroundWindow RegisterClipboardFormatA IsWindowEnabled ScrollWindow GetSystemMetrics SetWindowTextA GetMessagePos MessageBeep GetWindowPlacement SetForegroundWindow GrayStringA GetWindowThreadProcessId CreateWindowExW SetLayeredWindowAttributes DrawTextExA BeginPaint CloseClipboard DrawFocusRect DrawIconEx LoadMenuA DefFrameProcA WindowFromPoint GetWindowTextLengthW RegisterClassExA TranslateMessage PostQuitMessage GetDC IntersectRect GetClassInfoExW TrackPopupMenu GetMenuState GetWindowTextA AdjustWindowRectEx IsZoomed SetWindowPos ChildWindowFromPointEx TranslateAcceleratorA TrackPopupMenuEx ReleaseCapture PtInRect ReleaseDC GetClassInfoA SystemParametersInfoW GetWindowTextW InsertMenuItemW GetWindowRect SetFocus ShowCaret DestroyCursor ReuseDDElParam FlashWindow IsRectEmpty SetWindowsHookExW LoadBitmapW FillRect DialogBoxParamA SetClassLongA GetTabbedTextExtentA GetClipboardData FrameRect GetClientRect GetMenuItemInfoA GetDCEx EqualRect UnregisterClassW EnumWindows GetWindowLongA UnhookWindowsHookEx GetClipboardFormatNameA GetDoubleClickTime DrawFrameControl DefMDIChildProcA PostMessageA MapVirtualKeyA CallNextHookEx GetDesktopWindow SubtractRect GetWindow CharNextA LoadBitmapA CallWindowProcW SetActiveWindow UpdateWindow SetWindowRgn CreateAcceleratorTableA CallWindowProcA SendMessageW RemovePropA ClientToScreen SetCursor CheckRadioButton InsertMenuItemA EnableMenuItem DrawStateA LoadIconA CreateIconIndirect InvalidateRgn GetMenuDefaultItem MessageBoxA MapDialogRect DdeInitializeA DefWindowProcW GetScrollRange BeginDeferWindowPos SetWindowTextW DrawEdge DestroyWindow DispatchMessageA SetScrollInfo ExcludeUpdateRgn InflateRect LoadIconW OffsetRect GetThreadDesktop GetClassLongA EndDeferWindowPos GetMenuItemCount GetActiveWindow FindWindowA GetKeyState ModifyMenuA DrawStateW PostMessageW GetNextDlgTabItem InvalidateRect LoadStringA GetSubMenu SetClipboardData DrawIcon PostThreadMessageA SetDlgItemTextA GetNextDlgGroupItem GetClassNameA GetMenuStringA ValidateRgn CreatePopupMenu PeekMessageA SetMenu VkKeyScanA IsWindow DrawTextA IsIconic MapWindowPoints SetRectEmpty CreateIcon DrawMenuBar GetPropW TranslateMDISysAccel ShowWindow LoadCursorW UnregisterClassA DrawTextW RedrawWindow AnimateWindow GetPropA GetScrollInfo TabbedTextOutA SetWindowsHookExA GetParent GetClassInfoExA ValidateRect GetUserObjectInformationA keybd_event ShowScrollBar CharUpperW EnableWindow GetWindowDC SetMenuDefaultItem wvsprintfA SetWindowLongA EndPaint SystemParametersInfoA CreateMenu BringWindowToTop wsprintfW DestroyIcon EmptyClipboard CopyRect MoveWindow LoadAcceleratorsA GetMenuItemID CheckMenuItem IsDialogMessageA DefWindowProcA SendDlgItemMessageA SetMenuItemInfoA WinHelpA DestroyAcceleratorTable SetWindowContextHelpId OpenClipboard RemoveMenu WinHelpW SetWindowPlacement GetDlgItem DdeGetData InsertMenuA MessageBoxW GetCapture IsChild GetMessageTime GetLastActivePopup ChildWindowFromPoint LoadStringW RegisterClassA ScreenToClient IsWindowUnicode CreateWindowExA DeferWindowPos GetUpdateRgn GetFocus GetMenu CopyAcceleratorTableA CopyIcon RegisterClassExW AppendMenuA LoadCursorA DeleteMenu DestroyMenu wsprintfA HideCaret CharUpperA RemovePropW IsWindowVisible GetMessageA GetWindowTextLengthA SetCapture GetMenuCheckMarkDimensions PeekMessageW SetTimer GetTopWindow RegisterWindowMessageA ModifyMenuW EndDialog GetSysColorBrush GetScrollPos GetSysColor SetMenuItemInfoW LoadImageA SetCaretPos GetDlgCtrlID UnionRect GetCursorPos GetKeyboardLayout

wininet

FtpGetCurrentDirectoryA FtpCreateDirectoryA InternetErrorDlg InternetSetOptionA HttpQueryInfoA InternetGoOnline InternetFindNextFileA InternetReadFile InternetSetStatusCallback HttpOpenRequestA InternetOpenW FtpRemoveDirectoryA InternetGetLastResponseInfoA InternetCrackUrlA FtpRenameFileA InternetCloseHandle InternetConnectA FtpDeleteFileA InternetOpenA InternetSetCookieA FtpFindFirstFileA InternetCanonicalizeUrlA HttpSendRequestExA InternetSetFilePointer InternetTimeFromSystemTime InternetTimeToSystemTime

ole32

CreateGenericComposite CreateItemMoniker CLSIDFromProgID GetClassFile StgCreateDocfileOnILockBytes SetConvertStg CoUninitialize GetRunningObjectTable CreateStreamOnHGlobal CreateILockBytesOnHGlobal OleRegEnumVerbs OleSetClipboard OleSetMenuDescriptor OleSaveToStream CoGetClassObject OleIsCurrentClipboard OleLockRunning OleInitialize CoCreateInstance GetHGlobalFromILockBytes CoTaskMemFree OleGetClipboard OleUninitialize OleRegGetMiscStatus StgIsStorageILockBytes OleCreateMenuDescriptor CoTaskMemAlloc StringFromCLSID CoDisconnectObject OleFlushClipboard StgOpenStorageOnILockBytes StgOpenStorage OleCreateStaticFromData CoTreatAsClass CoInitialize CoRevokeClassObject OleCreateLinkToFile OleLoad OleDuplicateData CLSIDFromString CoFreeUnusedLibraries WriteClassStg OleSetContainedObject OleSave OleRegGetUserType OleCreate OleDestroyMenuDescriptor ReleaseStgMedium OleCreateLinkFromData CoTaskMemRealloc OleTranslateAccelerator RegisterDragDrop StgCreateDocfile CreateFileMoniker OleCreateFromFile CreateClassMoniker IsAccelerator OleGetIconOfClass ReadFmtUserTypeStg WriteFmtUserTypeStg

gdi32

GetStretchBltMode CopyEnhMetaFileA SetBkColor GetDIBits SetTextCharacterExtra StretchDIBits SetMapperFlags EndDoc DeleteMetaFile SelectPalette ExtTextOutA MoveToEx ScaleWindowExtEx ExtTextOutW FrameRgn GetBkColor PolyPolygon SetWorldTransform CopyMetaFileW SelectClipPath CreateDCW ScaleViewportExtEx Ellipse SetStretchBltMode CreateCompatibleBitmap GetTextExtentPoint32A Polygon FlattenPath GetTextAlign GetCharWidthA FloodFill Polyline GetTextExtentPoint32W GetNearestColor GetClipRgn SetWindowOrgEx OffsetClipRgn GetCharABCWidthsA SetPaletteEntries BitBlt GetOutlineTextMetricsA ExcludeClipRect SetBkMode TextOutA AbortDoc CreateCompatibleDC GetTextFaceA CreateHalftonePalette EnumFontFamiliesExW SetGraphicsMode RoundRect CreateEllipticRgn PlayMetaFileRecord GetTextColor DeleteEnhMetaFile GetGlyphOutlineA GetBitmapDimensionEx SaveDC CopyMetaFileA PatBlt GetObjectW EnumFontFamiliesA EnumMetaFile TextOutW CreateRectRgnIndirect DeleteDC SetTextAlign PolyBezier RectInRegion BeginPath FillRgn ResetDCA GetStockObject CreateFontW SetBrushOrgEx SetPixel GetSystemPaletteEntries StretchBlt Rectangle CreateRoundRectRgn SetTextColor SetAbortProc PolyDraw CreateRectRgn GetTextCharsetInfo IntersectClipRect PolyPolyline GetArcDirection ArcTo SetArcDirection GetWindowExtEx GdiFlush Escape GetNearestPaletteIndex PlayEnhMetaFile RestoreDC GetPixel GetClipBox CreatePolygonRgn CreatePen GetBitmapBits SelectObject CreatePatternBrush GetFontData StrokePath GetTextMetricsA GetTextCharacterExtra GetPaletteEntries StartPage CreateFontA FillPath LPtoDP ExtCreateRegion SetMapMode CreateHatchBrush OffsetRgn ExtFloodFill OffsetViewportOrgEx GetEnhMetaFileA GetTextMetricsW CreateDIBSection GetWindowOrgEx GetRgnBox GetBkMode CreatePenIndirect GetTextExtentPointA EnumFontFamiliesW SetViewportExtEx CloseMetaFile SelectClipRgn GetBoundsRect SetDIBitsToDevice CreateBitmapIndirect GetMapMode GetCurrentPositionEx UpdateColors EndPath CreateDIBPatternBrushPt Pie GetPolyFillMode CombineRgn GetDeviceCaps SetTextJustification UnrealizeObject EndPage PtVisible DeleteObject CreateBrushIndirect OffsetWindowOrgEx Arc GetPath SetWindowExtEx SetPixelV SetRectRgn GetViewportOrgEx CreateMetaFileA CreateFontIndirectW RealizePalette RectVisible ExtEscape StartDocA GetRegionData ExtSelectClipRgn ExtCreatePen SetPolyFillMode SetROP2 CreateDCA CreateSolidBrush PolylineTo SetDIBits CreatePalette CreateFontIndirectA GetObjectA LineTo EqualRgn PathToRegion CreateDIBitmap SetColorAdjustment SetBitmapDimensionEx PtInRegion EnumFontFamiliesExA CreateBitmap GetDCOrgEx DPtoLP SetBoundsRect PolyBezierTo GetViewportExtEx PaintRgn GetCharWidthW SetViewportOrgEx GetCurrentObject SetBitmapBits

shlwapi

StrTrimW PathRemoveFileSpecW PathAppendW PathFileExistsW PathIsFileSpecW PathRelativePathToW PathIsUNCW StrCatW StrStrW SHDeleteValueW PathSetDlgItemPathW PathStripPathW PathIsRelativeW PathFindExtensionW SHSetValueW PathStripToRootW PathIsRootW PathFindFileNameW StrStrIW PathRemoveBackslashW