jaffacakes118_Trojan[.]Win32[.]Dialer[.]bj[.]7366ff293253e5710e8f538b729c755c

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Dialer.bj.7366ff293253e5710e8f538b729c755c
Size 62KB
Sample261018-yy4e2ace33
SHA256 eac365b9a8511e77c68cd5a1dc5d4ef9701a05d2cfaff2022d28be1382cda1fe
MD5 7366ff293253e5710e8f538b729c755c
SHA1 cdecdf2afbbfc87f8022f664930821261d4b3864
SHA512 49dcf45e252aae8a6ecd11f907b7f253ba06d29d6a79e63c160bf66968dd7d3ccd6a10d39dbd5c05136c57dc93bce48be283f64effd58bef45c1f80bb2b37520
SSDEEP 768:I3VvOZ5VCfBegx2/GN3G+VaZloiWxxHZEOFOuAZ8dpXjHkJ7LDXZzyMoL7a6TtEn:Uu5VCpeJmVa8tsqXLhaIDhk3ZhFL26T
TLSH
T1AF534C02B7D0A5FAE793013036A2576267FDAC341CDA900BDF2376895CB1692F93A357
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Dialer.bj.7366ff293253e5710e8f538b729c755c

File Explorer

jaffacakes118_Trojan.Win32.Dialer.bj.7366ff293253e5710e8f538b729c755c

.dll 62KB

jaffacakes118_Trojan.Win32.Dialer.bj.7366ff293253e5710e8f538b729c755c

IMPHASH f86984cb29e42709afb66840d374d7ab
SHA256 eac365b9a8511e77c68cd5a1dc5d4ef9701a05d2cfaff2022d28be1382cda1fe
MD5 7366ff293253e5710e8f538b729c755c
SHA1 cdecdf2afbbfc87f8022f664930821261d4b3864
SHA512 49dcf45e252aae8a6ecd11f907b7f253ba06d29d6a79e63c160bf66968dd7d3ccd6a10d39dbd5c05136c57dc93bce48be283f64effd58bef45c1f80bb2b37520
SSDEEP 768:I3VvOZ5VCfBegx2/GN3G+VaZloiWxxHZEOFOuAZ8dpXjHkJ7LDXZzyMoL7a6TtEn:Uu5VCpeJmVa8tsqXLhaIDhk3ZhFL26T
TLSH
T1AF534C02B7D0A5FAE793013036A2576267FDAC341CDA900BDF2376895CB1692F93A357
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

53731

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

atoi wcstombs atol strtok fclose fread fopen memset fwrite memcpy memcmp strcat strlen exit strcpy strncpy strncat strcmp strstr tolower strchr

kernel32

CreateDirectoryA GetLastError LeaveCriticalSection EnterCriticalSection GetCurrentThreadId FlushInstructionCache GetCurrentProcess InterlockedIncrement InterlockedDecrement DisableThreadLibraryCalls HeapAlloc GetSystemInfo HeapCreate lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA GetModuleFileNameA WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA LoadLibraryExA lstrcmpiA lstrcpynA IsDBCSLeadByte InitializeCriticalSection HeapDestroy DeleteCriticalSection GetProcAddress LoadLibraryA lstrcpyA lstrcatA Sleep HeapFree HeapReAlloc GetProcessHeap GetFileAttributesA CreateFileA TerminateProcess OpenProcess FindClose FindFirstFileA CloseHandle WriteFile GetPrivateProfileStringA CopyFileA DeleteFileA FormatMessageA GetTempPathA GetLocalTime DebugBreak

oleaut32

VarUI4FromStr SysFreeString SysStringLen LoadRegTypeLi RegisterTypeLi LoadTypeLi SysAllocString VariantClear

ole32

CoTaskMemFree CoTaskMemAlloc CoTaskMemRealloc CoCreateInstance CoInitialize CoUninitialize

user32

MapWindowPoints GetClientRect SystemParametersInfoA GetWindowRect GetDlgItem GetWindow GetWindowLongA SetWindowLongA CharNextA SetTimer KillTimer BringWindowToTop GetWindowThreadProcessId IsWindow EnumWindows EnumThreadWindows LoadImageA TrackPopupMenuEx GetCursorPos EnableMenuItem InsertMenuA CreatePopupMenu DialogBoxParamA EnableWindow SetWindowTextA TranslateMessage DispatchMessageA DestroyWindow PostMessageA SendMessageA SetWindowPos ShowWindow CreateWindowExA LoadCursorA OffsetRect GetSysColor DrawFrameControl FillRect GetWindowTextA DrawTextA BeginPaint EndPaint DefWindowProcA RegisterClassExA wsprintfA MessageBoxA UnregisterClassA GetDC SendDlgItemMessageA GetParent EndDialog GetActiveWindow GetClassLongA

gdi32

SetTextColor CreateSolidBrush DeleteObject GetTextColor SetBkColor GetStockObject GetDeviceCaps

advapi32

RegCreateKeyExA RegDeleteValueA RegCreateKeyA RegQueryValueExA RegQueryInfoKeyA RegSetValueExA RegOpenKeyExA RegDeleteKeyA RegCloseKey RegEnumValueA RegEnumKeyExA

rasapi32

RasDialA RasGetEntryDialParamsA RasEnumConnectionsA RasGetConnectStatusA RasSetEntryDialParamsA RasSetEntryPropertiesA RasGetEntryPropertiesA RasEnumEntriesA RasEnumDevicesA RasEditPhonebookEntryA RasGetErrorStringA RasHangUpA RasDeleteEntryA

wininet

InternetCloseHandle InternetReadFile HttpQueryInfoA InternetOpenUrlA InternetOpenA InternetGetConnectedState InternetQueryOptionA

setupapi

SetupIterateCabinetA

shell32

Shell_NotifyIconA ShellExecuteA SHGetSpecialFolderLocation SHGetPathFromIDListA

wsock32

WSAStartup gethostbyname WSACleanup gethostname