NSGetModule
Static task
static1
Behavioral task
behavioral1
Sample
084f5bc75710740962d0c05c3dc17f2b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
084f5bc75710740962d0c05c3dc17f2b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
084f5bc75710740962d0c05c3dc17f2b_JaffaCakes118
-
Size
638KB
-
MD5
084f5bc75710740962d0c05c3dc17f2b
-
SHA1
9873c3a5a85923093cb33f6a262b335c2752889f
-
SHA256
76c36707b61ccf2429fa1654adf5dfb7a48954aff706712737b7cea382cbbe0b
-
SHA512
1e6e0570d37122366681cfc39b1bc0b50ba4a39c238e16745d63f918e7f4e8d7855a8f04b5d0182f8bec7a47abec27991e2eccd9550822a10ed31caffeac82fc
-
SSDEEP
12288:f0qvnuXp7AnSpDeWeiybY6xCk0yOydeHEV+WysXLPl7IeDTInJG23tIg:LuXpUnQDNeiybYkMydMEV+W1XLPl7IEM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 084f5bc75710740962d0c05c3dc17f2b_JaffaCakes118
Files
-
084f5bc75710740962d0c05c3dc17f2b_JaffaCakes118.dll windows:5 windows x86 arch:x86
c4a6158d6b56a2ce5ee680b3e72cb547
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
xpcom
NS_CStringContainerInit
NS_CStringContainerFinish
NS_StringContainerFinish
NS_StringContainerInit
NS_StringGetData
NS_CStringGetData
NS_StringContainerInit2
NS_Free
NS_GetServiceManager
NS_GetComponentManager
NS_Alloc
NS_CStringSetData
nspr4
PR_AtomicDecrement
PR_AtomicIncrement
kernel32
TlsFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetDriveTypeA
GetProcessHeap
SetEndOfFile
InitializeCriticalSection
LeaveCriticalSection
GetProcAddress
EnterCriticalSection
LoadLibraryA
DeleteCriticalSection
CreateFileA
GetTimeZoneInformation
CreateFileW
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetModuleHandleA
GetLocaleInfoW
InitializeCriticalSectionAndSpinCount
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCurrentDirectoryA
SetFilePointer
GetDateFormatA
GetTimeFormatA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
ReadFile
HeapReAlloc
WideCharToMultiByte
MultiByteToWideChar
GetFullPathNameW
Sleep
FreeLibrary
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
GetSystemTime
GetSystemInfo
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetLastError
HeapFree
ExitThread
CreateThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
RaiseException
RtlUnwind
LCMapStringA
LCMapStringW
GetCPInfo
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
InterlockedCompareExchange
SetLastError
HeapSize
ExitProcess
HeapAlloc
WriteFile
GetStdHandle
GetModuleFileNameA
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
user32
SetWindowLongW
GetWindowRect
PostMessageW
SetWindowPos
IsWindow
SetWindowTextW
FindWindowW
ShowWindow
SendMessageW
SystemParametersInfoW
MapWindowPoints
GetWindow
GetWindowLongW
GetClientRect
CallWindowProcW
wsprintfW
GetParent
ws2_32
inet_addr
rpcrt4
RpcStringFreeW
UuidToStringW
shlwapi
UrlEscapeW
PathMatchSpecW
UrlUnescapeW
PathIsDirectoryW
UrlGetPartW
StrStrIW
PathFileExistsW
advapi32
AdjustTokenPrivileges
ImpersonateSelf
LookupPrivilegeValueW
OpenThreadToken
shell32
SHCreateDirectoryExW
ole32
CoUninitialize
CoInitialize
CoTaskMemFree
CoCreateGuid
Exports
Exports
Sections
.text Size: 499KB - Virtual size: 499KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 73KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ