jaffacakes118_Trojan[.]Win32[.]Dialer[.]cf[.]bf4d26d57357585fea272c0c86cb404a

Sharing

Copy URL Twitter E-mail

General

Target
jaffacakes118_Trojan.Win32.Dialer.cf.bf4d26d57357585fea272c0c86cb404a
Size 88KB
Sample261018-yz29csce35
SHA256 56af53317ead8a1435204e7db3402ac65b6cd625ad30ae1b50986e15b4eae019
MD5 bf4d26d57357585fea272c0c86cb404a
SHA1 31c1ae871895469c2db6551b625414abc6ed4678
SHA512 8d5f8f6574c20d2a8687a5fb027585d669bad2c338623ac1f41056931ea6e47e69f2c9a3e2311ba1a5c0ca458a4c835f29d58158868975684ebedc70eab817d3
SSDEEP 768:2VXH1L3mrkonknNvJm1LVhI/xSN+Ce7IouQlVLU1FZF706zkSS1cW+WPPtHkkD:2f6koE5Jm1LomGIoB9+FFkNx+WPPtHZ
TLSH
T15A936D033F81B6B5D2E1C23478AA1762D2B96D351D99640BEB2337AD6C74642FD3D306
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
jaffacakes118_Trojan.Win32.Dialer.cf.bf4d26d57357585fea272c0c86cb404a

File Explorer

jaffacakes118_Trojan.Win32.Dialer.cf.bf4d26d57357585fea272c0c86cb404a

.dll 88KB

jaffacakes118_Trojan.Win32.Dialer.cf.bf4d26d57357585fea272c0c86cb404a

IMPHASH 7273fb175765a315dbe6a5557c7f258f
SHA256 56af53317ead8a1435204e7db3402ac65b6cd625ad30ae1b50986e15b4eae019
MD5 bf4d26d57357585fea272c0c86cb404a
SHA1 31c1ae871895469c2db6551b625414abc6ed4678
SHA512 8d5f8f6574c20d2a8687a5fb027585d669bad2c338623ac1f41056931ea6e47e69f2c9a3e2311ba1a5c0ca458a4c835f29d58158868975684ebedc70eab817d3
SSDEEP 768:2VXH1L3mrkonknNvJm1LVhI/xSN+Ce7IouQlVLU1FZF706zkSS1cW+WPPtHkkD:2f6koE5Jm1LomGIoB9+FFkNx+WPPtHZ
TLSH
T15A936D033F81B6B5D2E1C23478AA1762D2B96D351D99640BEB2337AD6C74642FD3D306
MD5 SHA1 SHA512 SSDEEP TLSH

regsvr32 windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

83875

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

msvcrt

_initterm _adjust_fdiv memcmp _splitpath atol tolower strncpy exit strtol fopen fgets fclose strchr strcat strtok atoi strstr strcmp free strcpy memset memcpy realloc malloc _EH_prolog __CxxFrameHandler ??3@YAXPAX@Z ??2@YAPAXI@Z wcstombs strlen

kernel32

CreateDirectoryA GetWindowsDirectoryA DisableThreadLibraryCalls GetCurrentThreadId GetVersionExA lstrcpyA MulDiv lstrlenW MultiByteToWideChar lstrlenA GetShortPathNameA GetModuleFileNameA WideCharToMultiByte FreeLibrary SizeofResource LoadResource FindResourceA GetLastError LoadLibraryExA lstrcmpiA lstrcpynA IsDBCSLeadByte HeapFree HeapReAlloc HeapAlloc GetProcessHeap Sleep GetFileAttributesA GetProcAddress CreateFileA lstrcmpA TerminateProcess OpenProcess FindClose FindFirstFileA GetSystemDirectoryA lstrcatA FormatMessageA CloseHandle WriteFile FlushInstructionCache GetCurrentProcess LoadLibraryA DeleteCriticalSection InitializeCriticalSection HeapDestroy InterlockedDecrement LeaveCriticalSection EnterCriticalSection InterlockedIncrement

user32

GetFocus EndPaint IsChild GetClientRect BeginPaint SetWindowLongA GetWindowLongA CallWindowProcA BringWindowToTop DestroyWindow GetDlgItemTextA LoadCursorA SetCursor LoadImageA EnableWindow IsIconic GetMessageA GetClassInfoExA DrawFrameControl MoveWindow SetTimer MessageBoxA KillTimer PostQuitMessage EnumWindows GetWindowTextA IsWindow PostMessageA GetWindowThreadProcessId SendMessageA wsprintfA PeekMessageA TranslateMessage CharNextA CreateWindowExA GetDC GetForegroundWindow LoadIconA RegisterClassExA GetSysColor ShowWindow FillRect ReleaseDC SendDlgItemMessageA OffsetRect DrawFocusRect DrawTextA InflateRect GetWindowRect DefWindowProcA GetSystemMetrics DispatchMessageA SetWindowTextA

gdi32

DeleteDC GetStockObject SaveDC SetMapMode SetWindowOrgEx SetViewportOrgEx LPtoDP RestoreDC SetTextColor SetBkColor DeleteObject CreateSolidBrush GetDeviceCaps CreateFontA CreateDCA

advapi32

RegDeleteKeyA RegEnumValueA RegQueryInfoKeyA RegDeleteValueA RegCreateKeyExA RegCloseKey RegCreateKeyA RegSetValueExA RegQueryValueExA RegOpenKeyExA RegEnumKeyExA

shell32

SHGetSpecialFolderLocation SHGetPathFromIDListA ShellExecuteA

ole32

CoCreateInstance CoInitialize CoUninitialize CoTaskMemRealloc CoTaskMemAlloc CoTaskMemFree

oleaut32

LoadTypeLi LoadRegTypeLi RegisterTypeLi VarUI4FromStr SysAllocString SysStringLen VariantClear SysFreeString

wininet

HttpQueryInfoA InternetSetStatusCallback InternetGetConnectedState InternetReadFile InternetCloseHandle InternetOpenUrlA InternetSetOptionA InternetOpenA HttpOpenRequestA InternetQueryOptionA InternetCanonicalizeUrlA InternetQueryDataAvailable InternetConnectA HttpSendRequestA

wsock32

gethostname gethostbyname WSAStartup

comctl32

ord17

setupapi

SetupIterateCabinetA