C:\bwa\QuickTimeWin-1680.34\srcroot\BuildResults\NoSym\npqtplugin.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f16d4c2da47d9af1d95f2e85d1cd1fe1_JaffaCakes118.dll
Resource
win7-20240319-en
General
-
Target
f16d4c2da47d9af1d95f2e85d1cd1fe1_JaffaCakes118
-
Size
216KB
-
MD5
f16d4c2da47d9af1d95f2e85d1cd1fe1
-
SHA1
eaa56dbc13675be4c774afc8129a1c47e33dce29
-
SHA256
aaa2c2ac13f135759e6d194eca6827527bb5a876fdaf23f7fbc46e1fdb537e88
-
SHA512
98fbb1ef4cdd3633bd9b85ed331db21fc9c1bbaa8e9d58348c662ca13ce242c04443f967fd8eee3fb77d2a4807718e9fa36bd2741d168916661eb1624d96631b
-
SSDEEP
3072:H4vR1RkTcZ7fcxdl5CTxlGuo7EI4M6u/JQtmLYPrLjoxCvRe1uYvcyuqTKIyaUXB:HolGAMfur/+7sIyaUx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f16d4c2da47d9af1d95f2e85d1cd1fe1_JaffaCakes118
Files
-
f16d4c2da47d9af1d95f2e85d1cd1fe1_JaffaCakes118.dll windows:4 windows x86 arch:x86
0a255867759edd1c8f8fe60d38026e5d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
kernel32
GetSystemDirectoryA
GetModuleFileNameA
GetLastError
GlobalFree
GlobalAlloc
CloseHandle
GetModuleHandleA
GetCurrentProcessId
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
LoadLibraryExA
GetProcAddress
FreeLibrary
WriteConsoleW
CreateFileA
InterlockedDecrement
MultiByteToWideChar
GetFileAttributesA
GetCurrentThreadId
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
SetEnvironmentVariableA
WideCharToMultiByte
SetEnvironmentVariableW
ExitProcess
Sleep
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
InterlockedIncrement
FlushFileBuffers
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
RtlUnwind
SetFilePointer
GetConsoleCP
GetConsoleMode
CompareStringA
CompareStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
user32
LoadStringA
wsprintfA
MessageBoxA
advapi32
RegQueryValueExA
RegCloseKey
RegOpenKeyExA
Exports
Exports
DllMain
Java_QuickTimePlugin_GetAutoPlay_stub
Java_QuickTimePlugin_GetBgColor_stub
Java_QuickTimePlugin_GetCancelBubble_stub
Java_QuickTimePlugin_GetChapterCount_stub
Java_QuickTimePlugin_GetChapterName_stub
Java_QuickTimePlugin_GetComponentVersion_stub
Java_QuickTimePlugin_GetControllerVisible_stub
Java_QuickTimePlugin_GetDuration_stub
Java_QuickTimePlugin_GetEndTime_stub
Java_QuickTimePlugin_GetFieldOfView_stub
Java_QuickTimePlugin_GetHREF_stub
Java_QuickTimePlugin_GetHotspotTarget_stub
Java_QuickTimePlugin_GetHotspotUrl_stub
Java_QuickTimePlugin_GetIsLooping_stub
Java_QuickTimePlugin_GetIsQuickTimeRegistered_stub
Java_QuickTimePlugin_GetIsVRMovie_stub
Java_QuickTimePlugin_GetKioskMode_stub
Java_QuickTimePlugin_GetLanguage_stub
Java_QuickTimePlugin_GetLoopIsPalindrome_stub
Java_QuickTimePlugin_GetMIMEType_stub
Java_QuickTimePlugin_GetMatrix_stub
Java_QuickTimePlugin_GetMaxBytesLoaded_stub
Java_QuickTimePlugin_GetMaxTimeLoaded_stub
Java_QuickTimePlugin_GetMovieID_stub
Java_QuickTimePlugin_GetMovieName_stub
Java_QuickTimePlugin_GetMovieSize_stub
Java_QuickTimePlugin_GetMute_stub
Java_QuickTimePlugin_GetNodeCount_stub
Java_QuickTimePlugin_GetNodeID_stub
Java_QuickTimePlugin_GetPanAngle_stub
Java_QuickTimePlugin_GetPlayEveryFrame_stub
Java_QuickTimePlugin_GetPluginStatus_stub
Java_QuickTimePlugin_GetPluginVersion_stub
Java_QuickTimePlugin_GetQTNEXTUrl_stub
Java_QuickTimePlugin_GetQuickTimeConnectionSpeed_stub
Java_QuickTimePlugin_GetQuickTimeLanguage_stub
Java_QuickTimePlugin_GetQuickTimeVersion_stub
Java_QuickTimePlugin_GetRate_stub
Java_QuickTimePlugin_GetRectangle_stub
Java_QuickTimePlugin_GetResetPropertiesOnReload_stub
Java_QuickTimePlugin_GetSpriteTrackVariable_stub
Java_QuickTimePlugin_GetStartTime_stub
Java_QuickTimePlugin_GetTarget_stub
Java_QuickTimePlugin_GetTiltAngle_stub
Java_QuickTimePlugin_GetTimeScale_stub
Java_QuickTimePlugin_GetTime_stub
Java_QuickTimePlugin_GetTrackCount_stub
Java_QuickTimePlugin_GetTrackEnabled_stub
Java_QuickTimePlugin_GetTrackName_stub
Java_QuickTimePlugin_GetTrackType_stub
Java_QuickTimePlugin_GetURL_stub
Java_QuickTimePlugin_GetUserData_stub
Java_QuickTimePlugin_GetVolume_stub
Java_QuickTimePlugin_GoPreviousNode_stub
Java_QuickTimePlugin_GoToChapter_stub
Java_QuickTimePlugin_Play_stub
Java_QuickTimePlugin_Rewind_stub
Java_QuickTimePlugin_SendSpriteEvent_stub
Java_QuickTimePlugin_SetAutoPlay_stub
Java_QuickTimePlugin_SetBgColor_stub
Java_QuickTimePlugin_SetCancelBubble_stub
Java_QuickTimePlugin_SetControllerVisible_stub
Java_QuickTimePlugin_SetEndTime_stub
Java_QuickTimePlugin_SetEventHandlerFunc_stub
Java_QuickTimePlugin_SetFieldOfView_stub
Java_QuickTimePlugin_SetHREF_stub
Java_QuickTimePlugin_SetHotspotTarget_stub
Java_QuickTimePlugin_SetHotspotUrl_stub
Java_QuickTimePlugin_SetIsLooping_stub
Java_QuickTimePlugin_SetKioskMode_stub
Java_QuickTimePlugin_SetLanguage_stub
Java_QuickTimePlugin_SetLoopIsPalindrome_stub
Java_QuickTimePlugin_SetMatrix_stub
Java_QuickTimePlugin_SetMovieID_stub
Java_QuickTimePlugin_SetMovieName_stub
Java_QuickTimePlugin_SetMute_stub
Java_QuickTimePlugin_SetNodeID_stub
Java_QuickTimePlugin_SetPanAngle_stub
Java_QuickTimePlugin_SetPlayEveryFrame_stub
Java_QuickTimePlugin_SetQTNEXTUrl_stub
Java_QuickTimePlugin_SetRate_stub
Java_QuickTimePlugin_SetRectangle_stub
Java_QuickTimePlugin_SetResetPropertiesOnReload_stub
Java_QuickTimePlugin_SetSpriteTrackVariable_stub
Java_QuickTimePlugin_SetStartTime_stub
Java_QuickTimePlugin_SetTarget_stub
Java_QuickTimePlugin_SetTiltAngle_stub
Java_QuickTimePlugin_SetTime_stub
Java_QuickTimePlugin_SetTrackEnabled_stub
Java_QuickTimePlugin_SetURL_stub
Java_QuickTimePlugin_SetVolume_stub
Java_QuickTimePlugin_ShowDefaultView_stub
Java_QuickTimePlugin_Step_stub
Java_QuickTimePlugin_Stop_stub
Java_java_lang_Float_floatToIntBits_stub
Java_java_lang_Float_intBitsToFloat_stub
Java_java_lang_Float_toString_stub
Java_java_lang_Float_valueOf_stub
NP_GetEntryPoints
NP_Initialize
NP_Shutdown
native_QuickTimePlugin_GetAutoPlay
native_QuickTimePlugin_GetBgColor
native_QuickTimePlugin_GetCancelBubble
native_QuickTimePlugin_GetChapterCount
native_QuickTimePlugin_GetChapterName
native_QuickTimePlugin_GetComponentVersion
native_QuickTimePlugin_GetControllerVisible
native_QuickTimePlugin_GetDuration
native_QuickTimePlugin_GetEndTime
native_QuickTimePlugin_GetFieldOfView
native_QuickTimePlugin_GetHREF
native_QuickTimePlugin_GetHotspotTarget
native_QuickTimePlugin_GetHotspotUrl
native_QuickTimePlugin_GetIsLooping
native_QuickTimePlugin_GetIsQuickTimeRegistered
native_QuickTimePlugin_GetIsVRMovie
native_QuickTimePlugin_GetKioskMode
native_QuickTimePlugin_GetLanguage
native_QuickTimePlugin_GetLoopIsPalindrome
native_QuickTimePlugin_GetMIMEType
native_QuickTimePlugin_GetMatrix
native_QuickTimePlugin_GetMaxBytesLoaded
native_QuickTimePlugin_GetMaxTimeLoaded
native_QuickTimePlugin_GetMovieID
native_QuickTimePlugin_GetMovieName
native_QuickTimePlugin_GetMovieSize
native_QuickTimePlugin_GetMute
native_QuickTimePlugin_GetNodeCount
native_QuickTimePlugin_GetNodeID
native_QuickTimePlugin_GetPanAngle
native_QuickTimePlugin_GetPlayEveryFrame
native_QuickTimePlugin_GetPluginStatus
native_QuickTimePlugin_GetPluginVersion
native_QuickTimePlugin_GetQTNEXTUrl
native_QuickTimePlugin_GetQuickTimeConnectionSpeed
native_QuickTimePlugin_GetQuickTimeLanguage
native_QuickTimePlugin_GetQuickTimeVersion
native_QuickTimePlugin_GetRate
native_QuickTimePlugin_GetRectangle
native_QuickTimePlugin_GetResetPropertiesOnReload
native_QuickTimePlugin_GetSpriteTrackVariable
native_QuickTimePlugin_GetStartTime
native_QuickTimePlugin_GetTarget
native_QuickTimePlugin_GetTiltAngle
native_QuickTimePlugin_GetTime
native_QuickTimePlugin_GetTimeScale
native_QuickTimePlugin_GetTrackCount
native_QuickTimePlugin_GetTrackEnabled
native_QuickTimePlugin_GetTrackName
native_QuickTimePlugin_GetTrackType
native_QuickTimePlugin_GetURL
native_QuickTimePlugin_GetUserData
native_QuickTimePlugin_GetVolume
native_QuickTimePlugin_GoPreviousNode
native_QuickTimePlugin_GoToChapter
native_QuickTimePlugin_Play
native_QuickTimePlugin_Rewind
native_QuickTimePlugin_SendSpriteEvent
native_QuickTimePlugin_SetAutoPlay
native_QuickTimePlugin_SetBgColor
native_QuickTimePlugin_SetCancelBubble
native_QuickTimePlugin_SetControllerVisible
native_QuickTimePlugin_SetEndTime
native_QuickTimePlugin_SetEventHandlerFunc
native_QuickTimePlugin_SetFieldOfView
native_QuickTimePlugin_SetHREF
native_QuickTimePlugin_SetHotspotTarget
native_QuickTimePlugin_SetHotspotUrl
native_QuickTimePlugin_SetIsLooping
native_QuickTimePlugin_SetKioskMode
native_QuickTimePlugin_SetLanguage
native_QuickTimePlugin_SetLoopIsPalindrome
native_QuickTimePlugin_SetMatrix
native_QuickTimePlugin_SetMovieID
native_QuickTimePlugin_SetMovieName
native_QuickTimePlugin_SetMute
native_QuickTimePlugin_SetNodeID
native_QuickTimePlugin_SetPanAngle
native_QuickTimePlugin_SetPlayEveryFrame
native_QuickTimePlugin_SetQTNEXTUrl
native_QuickTimePlugin_SetRate
native_QuickTimePlugin_SetRectangle
native_QuickTimePlugin_SetResetPropertiesOnReload
native_QuickTimePlugin_SetSpriteTrackVariable
native_QuickTimePlugin_SetStartTime
native_QuickTimePlugin_SetTarget
native_QuickTimePlugin_SetTiltAngle
native_QuickTimePlugin_SetTime
native_QuickTimePlugin_SetTrackEnabled
native_QuickTimePlugin_SetURL
native_QuickTimePlugin_SetVolume
native_QuickTimePlugin_ShowDefaultView
native_QuickTimePlugin_Step
native_QuickTimePlugin_Stop
native_java_lang_Float_floatToIntBits
native_java_lang_Float_intBitsToFloat
native_java_lang_Float_toString
native_java_lang_Float_valueOf
register_QuickTimePlugin
unregister_QuickTimePlugin
unuse_QuickTimePlugin
unuse_java_lang_Boolean
unuse_java_lang_Float
unuse_java_lang_Integer
unuse_netscape_plugin_Plugin
use_QuickTimePlugin
use_java_lang_Boolean
use_java_lang_Float
use_java_lang_Integer
use_netscape_plugin_Plugin
Sections
.text Size: 80KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 60KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE