jaffacakes118_Trojan[.]Win32[.]Dialer[.]bc[.]ca9a6c150877cf906b164d19021fe017

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Dialer.bc.ca9a6c150877cf906b164d19021fe017
Size 153KB
Sample261018-yynpksvsds
SHA256 570db4fa5eeffc005586add2207068518334f1fb9ecb142b070501fe968dc4a6
MD5 ca9a6c150877cf906b164d19021fe017
SHA1 efe314a0e8579739ee27b9fcb0c4762dcea89449
SHA512 b1df93c39950e2a492ab56b6166c6549742cdb608c68cfd1ff80b4904246063fb47b67d0a1b6b227f6711f2c26e33857f82fcd79596d88ccca6bfb55e10fd07d
SSDEEP 3072:9f1CFu2iUoi8oW+Pxc0+ibi/Wtxqr032j3Qe77zyY/0qBa35GEy:9i/oi8oW+zAmqr9j3QeGY/2G
TLSH
T122E37D3279D0C8B7D0920AB06CEE6672943EFE142F14415BA3E46E899E747F06D1A397
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Dialer.bc.ca9a6c150877cf906b164d19021fe017

File Explorer

jaffacakes118_Trojan.Win32.Dialer.bc.ca9a6c150877cf906b164d19021fe017

.exe 153KB

jaffacakes118_Trojan.Win32.Dialer.bc.ca9a6c150877cf906b164d19021fe017

IMPHASH 97165b246ce07268a41f5348b95b2846
SHA256 570db4fa5eeffc005586add2207068518334f1fb9ecb142b070501fe968dc4a6
MD5 ca9a6c150877cf906b164d19021fe017
SHA1 efe314a0e8579739ee27b9fcb0c4762dcea89449
SHA512 b1df93c39950e2a492ab56b6166c6549742cdb608c68cfd1ff80b4904246063fb47b67d0a1b6b227f6711f2c26e33857f82fcd79596d88ccca6bfb55e10fd07d
SSDEEP 3072:9f1CFu2iUoi8oW+Pxc0+ibi/Wtxqr032j3Qe77zyY/0qBa35GEy:9i/oi8oW+zAmqr9j3QeGY/2G
TLSH
T122E37D3279D0C8B7D0920AB06CEE6672943EFE142F14415BA3E46E899E747F06D1A397
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4452

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

wininet

InternetCloseHandle InternetOpenA InternetOpenUrlA InternetReadFile

advapi32

RegCloseKey RegOpenKeyExA RegQueryValueExA RegSetValueExA

kernel32

CloseHandle CompareStringA CopyFileA CreateEventA CreateFileA DeleteCriticalSection DeleteFileA EnterCriticalSection EnumCalendarInfoA ExitProcess FileTimeToDosDateTime FileTimeToLocalFileTime FindClose FindFirstFileA FreeLibrary GetACP GetCPInfo GetCommandLineA GetCurrentThreadId GetDiskFreeSpaceA GetEnvironmentStrings GetFileAttributesA GetFileSize GetFileType GetLastError GetLocalTime GetLocaleInfoA GetModuleFileNameA GetModuleHandleA GetOEMCP GetProcAddress GetProcessHeap GetStartupInfoA GetStdHandle GetStringTypeExA GetStringTypeW GetSystemDirectoryA GetThreadLocale GetVersion GetVersionExA HeapAlloc HeapFree InitializeCriticalSection InterlockedDecrement InterlockedIncrement LeaveCriticalSection LoadLibraryA LoadLibraryExA LocalAlloc LocalFree MultiByteToWideChar RaiseException ReadFile ResetEvent RtlUnwind SetConsoleCtrlHandler SetEndOfFile SetEvent SetFilePointer SetHandleCount SetLastError Sleep TlsAlloc TlsFree TlsGetValue TlsSetValue UnhandledExceptionFilter VirtualAlloc VirtualFree VirtualQuery WaitForSingleObject WideCharToMultiByte WriteFile lstrcpynA lstrlenA

shell32

ShellExecuteA

user32

CharNextA CreateWindowExA DefWindowProcA DispatchMessageA EnumThreadWindows FindWindowA FindWindowExA GetKeyboardType GetMessageA GetSystemMetrics IsWindow KillTimer LoadCursorA LoadIconA LoadStringA MessageBoxA PostQuitMessage RegisterClassExA SendMessageA SetTimer ShowWindow TranslateMessage wsprintfA

oleaut32

SafeArrayCreate SafeArrayGetElement SafeArrayGetLBound SafeArrayGetUBound SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayRedim SysAllocStringLen SysFreeString SysReAllocStringLen VarBoolFromStr VarBstrFromBool VarBstrFromCy VarBstrFromDate VarCyFromStr VarDateFromStr VarI4FromStr VarNeg VarNot VarR8FromStr VariantChangeTypeEx VariantClear VariantCopy VariantCopyInd VariantInit

Name

.text

Size

117KB

Virtual Size

120KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

15KB

Virtual Size

36KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.edata

Size

512B

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

5KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

9KB

Virtual Size

12KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

jaffacakes118_Trojan.Win32.Dialer.bc.ca9a6c150877cf906b164d19021fe017

wininet

advapi32

kernel32

shell32

user32

oleaut32

generic