NSGetModule
Static task
static1
Behavioral task
behavioral1
Sample
3470383f5e433fc2463dde3b3e911668_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
3470383f5e433fc2463dde3b3e911668_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
3470383f5e433fc2463dde3b3e911668_JaffaCakes118
-
Size
169KB
-
MD5
3470383f5e433fc2463dde3b3e911668
-
SHA1
a511d42edb553640a42ad90670f645230489ed01
-
SHA256
57b5e00efdc701398084f040a0eee6feb3d4fe1caafec441b96352eda43e55ac
-
SHA512
101346b819986a8658ce4bdefc7d1201eca2804026029508b265974c982b7902ab26cbac88cab5f27b6480361f68c006f9d13213e584c065146ed8a859b99337
-
SSDEEP
3072:3QY2d1I4eC7/553WAV98wPEJCst5u7Hx7LmFV+WlpQPXf:t4j7bx98TCss/fWlG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3470383f5e433fc2463dde3b3e911668_JaffaCakes118
Files
-
3470383f5e433fc2463dde3b3e911668_JaffaCakes118.dll windows:5 windows x86 arch:x86
995f357aacad839dbc4d09c3078f6824
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
user32
SetLayeredWindowAttributes
SetWindowPos
SetWindowLongW
GetWindowLongW
GetWindowInfo
nspr4
PR_AtomicIncrement
PR_AtomicDecrement
xpcom
NS_Alloc
kernel32
VirtualFree
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
HeapAlloc
RaiseException
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
ExitProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
RtlUnwind
HeapSize
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetLocaleInfoA
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
ReadFile
Exports
Exports
Sections
.text Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 4KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 99KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ