NSGetModule
Static task
static1
Behavioral task
behavioral1
Sample
ddc833b175353bfff72845be45638bc5_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ddc833b175353bfff72845be45638bc5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ddc833b175353bfff72845be45638bc5_JaffaCakes118
-
Size
1.5MB
-
MD5
ddc833b175353bfff72845be45638bc5
-
SHA1
83f4d86eab68ea105811e9f41be29e3895fba4f9
-
SHA256
e6b2003a5f80e9b176fc417bf52f1a33b8cf703e45a8e3aeca73c3097c99e868
-
SHA512
783f5a224e7f38af67e6d9ac090ab56ba003eba59798d99ec291dd6e1e504b36d62cd4d34afa5c112e82e5bf05bc95c63b2eac16e56b570b1d1ede64ff762279
-
SSDEEP
49152:+Op83eXHgjoklONMfCDkQp7mDxwp+NYVDpvcTs3U:+3PsklONMfCDkQp7mDxwp+NYVDn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ddc833b175353bfff72845be45638bc5_JaffaCakes118
Files
-
ddc833b175353bfff72845be45638bc5_JaffaCakes118.dll windows:5 windows x86 arch:x86
d93837abd7a14041ce3628adb7d8b004
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
xpcom
NS_GetComponentManager
NS_GetServiceManager
NS_Alloc
NS_Free
NS_CStringContainerFinish
NS_CStringSetData
NS_CStringContainerInit
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_CStringGetData
NS_StringGetData
nspr4
PR_AtomicDecrement
PR_AtomicIncrement
kernel32
GlobalFix
GetSystemDirectoryA
WaitCommEvent
CompareStringW
CompareStringA
CreateThread
ExitThread
WaitForMultipleObjects
LoadLibraryW
GlobalSize
WaitNamedPipeA
DeleteAtom
FlushInstructionCache
GetFileAttributesExA
GetNamedPipeInfo
MoveFileExW
Sleep
GetCurrentThreadId
GetStdHandle
CopyFileA
GetModuleFileNameW
FlushFileBuffers
lstrcmpiW
GetProcAddress
LoadLibraryA
VirtualLock
GetWindowsDirectoryW
WriteFile
GetThreadSelectorEntry
SetVolumeLabelA
CreateFileMappingA
RaiseException
GetTempPathW
GetProfileStringA
FindAtomA
IsBadHugeReadPtr
HeapLock
EnumResourceTypesW
EnumResourceNamesW
GetWindowsDirectoryA
LocalFree
RemoveDirectoryW
EndUpdateResourceA
CreateSemaphoreW
GetNamedPipeHandleStateW
GetProcessWorkingSetSize
FindFirstFileA
GetEnvironmentStringsW
IsBadStringPtrW
TransmitCommChar
TransactNamedPipe
CreateMailslotA
SetFileApisToANSI
GetDefaultCommConfigA
ReleaseMutex
GetProcessHeaps
FreeLibraryAndExitThread
InitAtomTable
GetLogicalDriveStringsW
GetProfileIntA
InterlockedIncrement
GlobalCompact
SetComputerNameW
OpenFileMappingA
IsProcessorFeaturePresent
LockResource
DefineDosDeviceW
GlobalUnWire
SetStdHandle
GetCurrentDirectoryA
SetFileAttributesW
CreateEventW
WriteFileGather
GetFileSize
SetComputerNameA
BuildCommDCBAndTimeoutsW
CreateDirectoryExW
ContinueDebugEvent
GetFirmwareEnvironmentVariableA
CancelIo
GetDriveTypeW
GetBinaryTypeW
VirtualFree
OpenEventA
GetAtomNameW
GetTimeZoneInformation
EraseTape
SetCommMask
GetVersionExW
SetFileShortNameW
HeapAlloc
HeapUnlock
DeleteCriticalSection
FatalAppExitW
GetProfileIntW
MoveFileA
BeginUpdateResourceA
GlobalFindAtomW
GetSystemTimeAsFileTime
ExpandEnvironmentStringsA
GetProfileSectionW
GetStartupInfoW
WaitNamedPipeW
GetSystemTimeAdjustment
lstrcmpA
CreateSemaphoreA
GetCommandLineW
lstrcatW
GetProfileStringW
SetCurrentDirectoryA
BeginUpdateResourceW
DosDateTimeToFileTime
GetPrivateProfileStructW
WriteProfileStringA
FileTimeToDosDateTime
BuildCommDCBW
GetNumaAvailableMemoryNode
GlobalUnfix
SetDefaultCommConfigA
VirtualProtectEx
lstrcmpW
DebugBreak
LocalReAlloc
HeapReAlloc
GetSystemInfo
GetCommandLineA
GetProcessTimes
GetNumaProcessorNode
EnumResourceLanguagesA
OpenEventW
CreateMailslotW
QueryDosDeviceA
GetExitCodeThread
CreateProcessW
GetCommModemStatus
GetTapeStatus
GetFileInformationByHandle
GetVolumeInformationW
BackupWrite
CallNamedPipeW
GetProcessAffinityMask
GlobalAddAtomW
GetModuleFileNameA
ClearCommBreak
DebugBreakProcess
GetTempFileNameA
VirtualQueryEx
AddAtomW
LeaveCriticalSection
OpenThread
lstrcpyW
ResumeThread
GetThreadPriorityBoost
CommConfigDialogW
GetCommTimeouts
GetEnvironmentVariableA
CreateNamedPipeA
WritePrivateProfileStringW
ClearCommError
FindClose
SetErrorMode
LocalUnlock
SetThreadAffinityMask
AddAtomA
GetThreadTimes
VirtualAllocEx
FindResourceA
GlobalUnlock
GetHandleInformation
UnlockFile
lstrcpynW
HeapDestroy
CancelDeviceWakeupRequest
WriteProcessMemory
TerminateThread
GetFullPathNameA
lstrlenA
TlsSetValue
HeapQueryInformation
GetProcessShutdownParameters
FormatMessageW
GetProcessHeap
CreateFileW
FindResourceExA
SetTapeParameters
PurgeComm
GlobalAlloc
IsBadWritePtr
OpenSemaphoreA
SetSystemPowerState
LockFile
CommConfigDialogA
PostQueuedCompletionStatus
GetLocalTime
GetVolumeInformationA
VirtualProtect
UnmapViewOfFile
SetFileShortNameA
LocalLock
SetSystemTime
SetMessageWaitingIndicator
DeviceIoControl
lstrcpyA
WriteProfileSectionW
WaitForSingleObject
WritePrivateProfileSectionW
LoadResource
RequestDeviceWakeup
lstrcpynA
WriteTapemark
QueryDosDeviceW
SetEnvironmentVariableW
GetDiskFreeSpaceExW
GetDriveTypeA
FindNextChangeNotification
TlsGetValue
WideCharToMultiByte
DebugSetProcessKillOnExit
MultiByteToWideChar
FreeLibrary
FlushViewOfFile
FindNextFileW
SetThreadExecutionState
GlobalDeleteAtom
GetSystemDirectoryW
CreateTapePartition
GetBinaryTypeA
GetThreadContext
GetDiskFreeSpaceW
GetPrivateProfileSectionW
LocalSize
FindAtomW
GetCurrentDirectoryW
CreateDirectoryExA
FindFirstChangeNotificationW
WaitForSingleObjectEx
GetCompressedFileSizeW
SetThreadPriorityBoost
CreateDirectoryW
GetNumaHighestNodeNumber
GetCommMask
SetEndOfFile
SetFirmwareEnvironmentVariableW
CopyFileW
GetMailslotInfo
GetShortPathNameW
OutputDebugStringW
GetLongPathNameW
FileTimeToLocalFileTime
GlobalAddAtomA
FindFirstFileW
GetNamedPipeHandleStateA
GetCurrentThread
IsSystemResumeAutomatic
GetSystemTime
GetVersionExA
SetCommConfig
CallNamedPipeA
ProcessIdToSessionId
FindCloseChangeNotification
GetPrivateProfileSectionNamesA
GetThreadPriority
DeleteFileA
GetSystemWindowsDirectoryW
GetPrivateProfileStringW
GetFileAttributesExW
InterlockedCompareExchange
DeleteFileW
GetDefaultCommConfigW
GetModuleHandleW
GetCommProperties
GetAtomNameA
FileTimeToSystemTime
SuspendThread
GetLastError
ReadFileScatter
LocalHandle
SetVolumeLabelW
MapViewOfFile
GetPrivateProfileSectionNamesW
GetCurrentProcessId
GlobalFree
FindFirstChangeNotificationA
GetTapePosition
OpenMutexW
GetTempFileNameW
VirtualQuery
DuplicateHandle
GetTickCount
WriteProfileStringW
GetCompressedFileSizeA
CreateRemoteThread
FindNextFileA
EndUpdateResourceW
GetPriorityClass
PeekNamedPipe
IsBadHugeWritePtr
GetOverlappedResult
ReadFile
CreateDirectoryA
EnumResourceTypesA
CreateFileA
GetDiskFreeSpaceExA
GetEnvironmentVariableW
MapViewOfFileEx
GetSystemPowerStatus
MoveFileW
GetProcessId
GetTapeParameters
GetExitCodeProcess
GetDiskFreeSpaceA
CreateFileMappingW
LocalShrink
GetFullPathNameW
GetProcessVersion
GetFileAttributesW
GetNumaNodeProcessorMask
GetQueuedCompletionStatus
SetCommState
BackupRead
GetComputerNameW
IsBadCodePtr
SetCurrentDirectoryW
OpenSemaphoreW
GetPrivateProfileStructA
GlobalReAlloc
GetProcessPriorityBoost
LocalCompact
GetFileSizeEx
FindResourceW
GetCommConfig
GetLongPathNameA
GetFileType
HeapFree
FatalExit
EnumResourceLanguagesW
UnlockFileEx
InitializeCriticalSection
GlobalHandle
ResetWriteWatch
GetCommState
CreateIoCompletionPort
CreateMutexW
EscapeCommFunction
GetCurrentProcess
QueryPerformanceCounter
SetThreadPriority
MulDiv
FindResourceExW
VirtualUnlock
OpenFileMappingW
ExpandEnvironmentStringsW
GetSystemWindowsDirectoryA
LocalFileTimeToFileTime
LocalAlloc
GlobalWire
DisconnectNamedPipe
GetVersion
OpenMutexA
GlobalFindAtomA
MoveFileExA
CreateNamedPipeW
GetFileAttributesA
DefineDosDeviceA
WinExec
FreeEnvironmentStringsW
SetProcessAffinityMask
lstrcatA
FreeEnvironmentStringsA
TlsAlloc
VirtualAlloc
SetSystemTimeAdjustment
DisableThreadLibraryCalls
GetFirmwareEnvironmentVariableW
GetDevicePowerState
ConnectNamedPipe
SetHandleInformation
SetLastError
IsBadReadPtr
CreateMutexA
GetStartupInfoA
SetEnvironmentVariableA
GlobalMemoryStatus
WritePrivateProfileStructW
GetModuleHandleA
GlobalLock
GetFileTime
WaitForMultipleObjectsEx
SetProcessPriorityBoost
GetProfileSectionA
VerifyVersionInfoW
GetProcessIoCounters
BackupSeek
InterlockedExchange
EnumResourceNamesA
HeapCreate
SearchPathW
GetLogicalDrives
TlsFree
CreateEventA
GlobalMemoryStatusEx
WritePrivateProfileStructA
IsBadStringPtrA
CreatePipe
lstrcmpiA
GlobalGetAtomNameA
GetPrivateProfileIntA
GlobalGetAtomNameW
FatalAppExitA
SetMailslotInfo
FreeResource
InterlockedDecrement
EnterCriticalSection
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
LCMapStringA
LCMapStringW
GetCPInfo
GetStringTypeW
HeapSize
ExitProcess
SetHandleCount
GetEnvironmentStrings
GetACP
GetOEMCP
IsValidCodePage
CloseHandle
GetConsoleCP
GetConsoleMode
SetFilePointer
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
GetStringTypeA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetShortPathNameA
user32
IsWindow
SystemParametersInfoW
EnumChildWindows
RealGetWindowClassA
MoveWindow
SetWindowTextW
SetWindowLongW
ShowWindow
CharLowerW
GetWindowRect
CallWindowProcW
SetWindowPos
GetClassNameA
RealGetWindowClassW
GetClassNameW
CharUpperW
SendMessageW
IsWindowVisible
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
Exports
Exports
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 109KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 11KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 141KB - Virtual size: 140KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ