o:\OOO320\src\svtools\wntmsci12.pro\bin\svtmisc.uno.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0bf04755bd52a5aa3d7a36f5f4eec591_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0bf04755bd52a5aa3d7a36f5f4eec591_JaffaCakes118.dll
Resource
win10v2004-20240508-en
General
-
Target
0bf04755bd52a5aa3d7a36f5f4eec591_JaffaCakes118
-
Size
84KB
-
MD5
0bf04755bd52a5aa3d7a36f5f4eec591
-
SHA1
da6902d0a2538452a5ce73dcf16f22de682147de
-
SHA256
a72fd197cb3046959c85b1ff665402f7cfdfd7406ea1b0f1218501fdf83d9424
-
SHA512
882a9d9d0d34d84337e46be74a8606ab7a8feb38baf1fb9079b517890f6e9eaefe2cc7b1592cf5e1c958851317c46390272c18cde6066d698f643f565da7c043
-
SSDEEP
1536:qguHmF+bY9FmjA/fysk56WQ8pUZB7zU3M2OKeZPDe:hF+bYD16sk56WQXZdQ3dOKeZ7e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf04755bd52a5aa3d7a36f5f4eec591_JaffaCakes118
Files
-
0bf04755bd52a5aa3d7a36f5f4eec591_JaffaCakes118.dll windows:5 windows x86 arch:x86
5a84e17701e83506e223081a1099360e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
svtmi
?destroyDialog@OGenericUnoDialog@svt@@MAEXXZ
?getTypes@OGenericUnoDialog@svt@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?setTitle@OGenericUnoDialog@svt@@UAAXABVOUString@rtl@@@Z
?execute@OGenericUnoDialog@svt@@UAAFXZ
?supportsService@OGenericUnoDialog@svt@@UAAEABVOUString@rtl@@@Z
?initialize@OGenericUnoDialog@svt@@UAAXABV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@@Z
?convertFastPropertyValue@OGenericUnoDialog@svt@@UAAEAAVAny@uno@star@sun@com@@0JABV34567@@Z
?setFastPropertyValue_NoBroadcast@OGenericUnoDialog@svt@@UAAXJABVAny@uno@star@sun@com@@@Z
??0GraphicDescriptor@@QAE@PBVString@@@Z
??0GraphicFilter@@QAE@E@Z
??1GraphicFilter@@QAE@XZ
?GetExportFormatShortName@FilterConfigCache@@QAE?AVString@@G@Z
?IsExportInternalFilter@FilterConfigCache@@QAEEG@Z
?GetExportFilterName@FilterConfigCache@@QAE?AVString@@G@Z
?GetExportInternalFilterName@FilterConfigCache@@QAE?AVString@@G@Z
??1FilterConfigItem@@QAE@XZ
??1SvtSysLocale@@QAE@XZ
?ReadInt32@FilterConfigItem@@QAEJABVOUString@rtl@@J@Z
?release@OGenericUnoDialog@svt@@UAAXXZ
?acquire@OGenericUnoDialog@svt@@UAAXXZ
?queryInterface@OGenericUnoDialog@svt@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0OGenericUnoDialog@svt@@IAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
?GetLocaleDataPtr@SvtSysLocale@@QBEPBVLocaleDataWrapper@@XZ
??0SvtSysLocale@@QAE@XZ
??0FilterConfigItem@@QAE@ABVOUString@rtl@@@Z
?getFieldMapping@AddressBookSourceDialog@svt@@QBEXAAV?$Sequence@UAliasProgrammaticPair@util@star@sun@com@@@uno@star@sun@com@@@Z
?GetFilterData@FilterConfigItem@@QBE?AV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@XZ
?WriteBool@FilterConfigItem@@QAEXABVOUString@rtl@@E@Z
?WriteSize@FilterConfigItem@@QAEXABVOUString@rtl@@ABUSize@awt@star@sun@com@@@Z
?WriteInt32@FilterConfigItem@@QAEXABVOUString@rtl@@J@Z
?ReadSize@FilterConfigItem@@QAE?AUSize@awt@star@sun@com@@ABVOUString@rtl@@ABU23456@@Z
?ReadBool@FilterConfigItem@@QAEEABVOUString@rtl@@E@Z
??0FilterConfigItem@@QAE@ABVOUString@rtl@@PAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
??0FixedInfo@@QAE@PAVWindow@@ABVResId@@@Z
?implInitialize@OGenericUnoDialog@svt@@MAEXABVAny@uno@star@sun@com@@@Z
??1AddressBookSourceDialog@svt@@UAE@XZ
?PreNotify@AddressBookSourceDialog@svt@@MAEJAAVNotifyEvent@@@Z
??0AddressBookSourceDialog@svt@@QAE@PAVWindow@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXDataSource@sdbc@star@sun@com@@@4567@ABVOUString@rtl@@3ABV?$Sequence@UAliasProgrammaticPair@util@star@sun@com@@@4567@@Z
??0AddressBookSourceDialog@svt@@QAE@PAVWindow@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
??1OGenericUnoDialog@svt@@MAE@XZ
vclmi
??0NumericField@@QAE@PAVWindow@@ABVResId@@@Z
??0ModalDialog@@QAE@PAVWindow@@ABVResId@@@Z
??0OKButton@@QAE@PAVWindow@@ABVResId@@@Z
??0CancelButton@@QAE@PAVWindow@@ABVResId@@@Z
??0HelpButton@@QAE@PAVWindow@@ABVResId@@@Z
??0ListBox@@QAE@PAVWindow@@ABVResId@@@Z
??0CheckBox@@QAE@PAVWindow@@ABVResId@@@Z
??0FixedLine@@QAE@PAVWindow@@ABVResId@@@Z
??0RadioButton@@QAE@PAVWindow@@ABVResId@@@Z
??0FixedText@@QAE@PAVWindow@@ABVResId@@@Z
??0MetricField@@QAE@PAVWindow@@ABVResId@@@Z
??0ComboBox@@QAE@PAVWindow@@ABVResId@@@Z
?SetState@CheckBox@@QAEXW4TriState@@@Z
?SetDefaultUnit@MetricField@@SAXW4FieldUnit@@@Z
?SetUnit@MetricFormatter@@QAEXW4FieldUnit@@@Z
?Check@RadioButton@@QAEXE@Z
?ConvertDoubleValue@MetricField@@SANNGW4FieldUnit@@W4MapUnit@@@Z
??1ComboBox@@UAE@XZ
??1Button@@UAE@XZ
??1ListBox@@UAE@XZ
?PreNotify@SystemWindow@@UAEJAAVNotifyEvent@@@Z
??1Control@@UAE@XZ
??1MetricField@@UAE@XZ
??1RadioButton@@UAE@XZ
??1PushButton@@UAE@XZ
??1Dialog@@UAE@XZ
?Enable@Window@@QAEX_N0@Z
??1HelpButton@@UAE@XZ
??1CancelButton@@UAE@XZ
??1OKButton@@UAE@XZ
??1CheckBox@@UAE@XZ
??1NumericField@@UAE@XZ
??1FixedLine@@UAE@XZ
??1ModalDialog@@UAE@XZ
?EndDialog@Dialog@@QAEXJ@Z
?GetSettings@Application@@SAABVAllSettings@@XZ
?GetUILocale@AllSettings@@QBEABULocale@lang@star@sun@com@@XZ
??1FixedText@@UAE@XZ
?StartExecuteModal@Dialog@@UAEXABVLink@@@Z
?Execute@Dialog@@UAEFXZ
?Resizing@SystemWindow@@UAEXAAVSize@@@Z
?Roll@SystemWindow@@UAEXXZ
?Pin@SystemWindow@@UAEXXZ
?TitleButtonClick@SystemWindow@@UAEXG@Z
?Close@Dialog@@UAEEXZ
?GetSurroundingTextSelection@Window@@UBE?AVSelection@@XZ
?GetSurroundingText@Window@@UBE?AVString@@XZ
?GetOptimalSize@Window@@UBE?AVSize@@W4WindowSizeType@@@Z
?GetPrimarySelection@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetClipboard@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragGestureRecognizer@Window@@UAE?AV?$Reference@VXDragGestureRecognizer@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragSource@Window@@UAE?AV?$Reference@VXDragSource@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDropTarget@Window@@UAE?AV?$Reference@VXDropTarget@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetParentLabeledBy@Window@@UBEPAV1@PBV1@@Z
?GetParentLabelFor@Window@@UBEPAV1@PBV1@@Z
?CreateAccessible@Window@@UAE?AV?$Reference@VXAccessible@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?SetComponentInterface@Window@@UAEXV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@@Z
?GetComponentInterface@Window@@UAE?AV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@E@Z
?GetDisplayBackground@Window@@UBEABVWallpaper@@XZ
?GetDisplayText@Window@@UBE?AVString@@XZ
?GetText@Window@@UBE?AVString@@XZ
?SetText@Window@@UAEXABVString@@@Z
?Invalidate@Window@@UAEXG@Z
?Invalidate@Window@@UAEXABVRectangle@@G@Z
?Invalidate@Window@@UAEXABVRegion@@G@Z
?Scroll@Window@@UAEXJJG@Z
?Scroll@Window@@UAEXJJABVRectangle@@G@Z
?IsScrollable@Window@@UBEEXZ
?SetOutputSizePixel@Window@@UAEXABVSize@@@Z
?GetSizePixel@Window@@UBE?AVSize@@XZ
?SetSizePixel@Window@@UAEXABVSize@@@Z
?GetPosPixel@Window@@UBE?AVPoint@@XZ
?SetPosPixel@Window@@UAEXABVPoint@@@Z
?SetPosSizePixel@Window@@UAEXJJJJG@Z
?SetPosSizePixel@Window@@UAEXABVPoint@@ABVSize@@@Z
?SetSettings@Window@@UAEXABVAllSettings@@E@Z
?GetPreferredKeyInputWindow@Window@@UAEPAV1@XZ
?Notify@Dialog@@UAEJAAVNotifyEvent@@@Z
?DataChanged@Dialog@@UAEXABVDataChangedEvent@@@Z
?StateChanged@Dialog@@UAEXG@Z
?UserEvent@Window@@UAEXKPAX@Z
?Tracking@Window@@UAEXABVTrackingEvent@@@Z
?Command@Window@@UAEXABVCommandEvent@@@Z
?RequestHelp@Window@@UAEXABVHelpEvent@@@Z
?LoseFocus@Window@@UAEXXZ
?GetFocus@Window@@UAEXXZ
?Deactivate@Window@@UAEXXZ
?Activate@Window@@UAEXXZ
?Resize@Window@@UAEXXZ
?Move@Window@@UAEXXZ
?Draw@Dialog@@MAEXPAVOutputDevice@@ABVPoint@@ABVSize@@K@Z
?Paint@Window@@UAEXABVRectangle@@@Z
?PrePaint@Window@@UAEXXZ
?KeyUp@Window@@UAEXABVKeyEvent@@@Z
?KeyInput@Window@@UAEXABVKeyEvent@@@Z
?MouseButtonUp@Window@@UAEXABVMouseEvent@@@Z
?MouseButtonDown@Window@@UAEXABVMouseEvent@@@Z
?MouseMove@Window@@UAEXABVMouseEvent@@@Z
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetSettings@Window@@UAEXABVAllSettings@@@Z
?GetDefDialogParent@Application@@SAPAVWindow@@XZ
svlmi
?SubstituteVariable@SvtPathOptions@@QAE?AVString@@ABV2@@Z
??0SvtPathOptions@@QAE@XZ
??1SvtPathOptions@@UAE@XZ
utlmi
?getMeasurementSystemEnum@LocaleDataWrapper@@QBE?AW4MeasurementSystem@@XZ
tlmi
??0ByteString@@QAE@PBDG@Z
?EqualsIgnoreCaseAscii@String@@QBEEPBD@Z
?Equals@String@@QBEEABV1@@Z
?Len@String@@QBEGXZ
?SearchAndReplace@String@@QAEGABV1@0G@Z
??4String@@QAEAAV0@ABVOUString@rtl@@@Z
??0String@@QAE@XZ
??0String@@QAE@ABVResId@@@Z
?ToInt32@String@@QBEJXZ
?CreateFromInt32@String@@SA?AV1@JF@Z
?PopContext@ResMgr@@QAEXPBVResource@@@Z
?Append@String@@QAEAAV1@ABV1@@Z
?ToUpperAscii@String@@QAEAAV1@XZ
?GetBuffer@ByteString@@QBEPBDXZ
??1ByteString@@QAE@XZ
?GetTokenCount@String@@QBEGG@Z
?GetToken@String@@QBE?AV1@GG@Z
??0String@@QAE@D@Z
?CreateFromAscii@String@@SA?AV1@PBD@Z
??0String@@QAE@PBDGGK@Z
??0String@@QAE@ABV0@@Z
??4String@@QAEAAV0@ABV0@@Z
??0String@@QAE@ABVOUString@rtl@@@Z
??BString@@QBE?AVOUString@rtl@@XZ
??1String@@QAE@XZ
??1SimpleResMgr@@UAE@XZ
??0SimpleResMgr@@QAE@PBDABULocale@lang@star@sun@com@@@Z
?GetAppData@@YAPAPAXG@Z
??1ResMgr@@QAE@XZ
?CreateResMgr@ResMgr@@SAPAV1@PBDULocale@lang@star@sun@com@@@Z
comphelp4msc
?setFastPropertyValue@OPropertyContainer@comphelper@@MAAXJABVAny@uno@star@sun@com@@@Z
?getFastPropertyValue@OPropertyContainer@comphelper@@MBAXAAVAny@uno@star@sun@com@@J@Z
?registerProperty@OPropertyContainerHelper@comphelper@@IAEXABVOUString@rtl@@JJPAXABVType@uno@star@sun@com@@@Z
?describeProperties@OPropertyContainerHelper@comphelper@@IBEXAAV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@@Z
?getLegacyServiceFactory@ComponentContext@comphelper@@QBE?AV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@XZ
cppuhelper3msc
?firePropertiesChangeEvent@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?getFastPropertyValue@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@J@Z
?setPropertyValue@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABVAny@uno@star@sun@com@@@Z
?getPropertyValue@OPropertySetHelper@cppu@@UAA?AVAny@uno@star@sun@com@@ABVOUString@rtl@@@Z
?addPropertyChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removePropertyChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXPropertyChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addVetoableChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removeVetoableChangeListener@OPropertySetHelper@cppu@@UAAXABVOUString@rtl@@ABV?$Reference@VXVetoableChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
??1OImplementationId@cppu@@QAE@XZ
?createSingleFactory@cppu@@YA?AV?$Reference@VXSingleServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@3456@ABVOUString@rtl@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@0@ZABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
??1OWeakObject@cppu@@MAE@XZ
??0OWeakObject@cppu@@QAE@XZ
?acquire@OWeakObject@cppu@@UAAXXZ
?release@OWeakObject@cppu@@UAAXXZ
?WeakImplHelper_query@cppu@@YA?AVAny@uno@star@sun@com@@ABVType@3456@PAUclass_data@1@PAXPAVOWeakObject@1@@Z
?WeakImplHelper_getTypes@cppu@@YA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@PAUclass_data@1@@Z
?ImplHelper_getImplementationId@cppu@@YA?AV?$Sequence@C@uno@star@sun@com@@PAUclass_data@1@@Z
?removePropertiesChangeListener@OPropertySetHelper@cppu@@UAAXABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addPropertiesChangeListener@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?getPropertyValues@OPropertySetHelper@cppu@@UAA?AV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@VOUString@rtl@@@4567@@Z
?setPropertyValues@OPropertySetHelper@cppu@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Sequence@VAny@uno@star@sun@com@@@4567@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
??0OPropertyArrayHelper@cppu@@QAE@ABV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@E@Z
?getImplementationId@OImplementationId@cppu@@QBA?AV?$Sequence@C@uno@star@sun@com@@XZ
?createPropertySetInfo@OPropertySetHelper@cppu@@SA?AV?$Reference@VXPropertySetInfo@beans@star@sun@com@@@uno@star@sun@com@@AAVIPropertyArrayHelper@2@@Z
cppu3
typelib_static_sequence_type_init
uno_type_sequence_realloc
uno_type_any_assign
uno_type_sequence_reference2One
uno_type_sequence_construct
uno_type_destructData
uno_type_sequence_assign
uno_type_assignData
typelib_static_type_init
uno_any_destruct
uno_any_construct
typelib_static_type_getByTypeClass
sal3
rtl_string_newFromStr
rtl_ustr_reverseCompare_WithLength
osl_getFileURLFromSystemPath
osl_getSystemPathFromFileURL
osl_unloadModule
osl_loadModule
osl_getFunctionSymbol
rtl_ustr_asciil_reverseEquals_WithLength
rtl_str_compare
osl_incrementInterlockedCount
rtl_freeMemory
rtl_allocateMemory
osl_getGlobalMutex
osl_releaseMutex
osl_acquireMutex
osl_destroyMutex
osl_createMutex
rtl_uString_newFromAscii
rtl_ustr_ascii_compare_WithLength
rtl_string_release
rtl_uString_new
rtl_ustr_compare_WithLength
rtl_uString_newConcat
rtl_uString_release
rtl_string2UString
rtl_uString_acquire
rtl_uString_assign
msvcr90
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
_purecall
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
??2@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
_malloc_crt
_CxxThrowException
kernel32
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
DisableThreadLibraryCalls
Sleep
InterlockedExchange
IsDebuggerPresent
stlport_vc7145
?_M_decrement@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
?_Rebalance@?$_Rb_global@_N@_STL@@SAXPAU_Rb_tree_node_base@2@AAPAU32@@Z
?_M_increment@?$_Rb_global@_N@_STL@@SAPAU_Rb_tree_node_base@2@PAU32@@Z
Exports
Exports
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Sections
.text Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ