105bb87c899390ac3d8055d9ee43a1fd_JaffaCakes118

Sharing

Copy URL Twitter E-mail

General

Target
105bb87c899390ac3d8055d9ee43a1fd_JaffaCakes118
Size 756KB
Sample240626-chkr4a1dnr
SHA256 f282c8828b0ce59eadc5b165397be2dcb2706cec5d61d57c1e97730d0be8e6f9
MD5 105bb87c899390ac3d8055d9ee43a1fd
SHA1 2c3aa4e14a0e15f17133f2180b22c98faea9c10b
SHA512 30216dd53f45824e6ed4872d558bb6f9c179a66c05d2af34a085a76e6f99fa82cf1ed2fa83103bcf82d4dca5aeb226fc0db8adfd0281c4aa6bef59c36b69bc5f
SSDEEP 12288:R0ywjWtUO+Oke04VGUl6vhOiue+bhPrRx4vSZqB7Y0lnMyC2+EKg55vZuYtx:uCwsdPJyC29xBZuYH
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
105bb87c899390ac3d8055d9ee43a1fd_JaffaCakes118

File Explorer

105bb87c899390ac3d8055d9ee43a1fd_JaffaCakes118

.dll 756KB

105bb87c899390ac3d8055d9ee43a1fd_JaffaCakes118

IMPHASH f171925efbe1dceee667aabf65657fba
SHA256 f282c8828b0ce59eadc5b165397be2dcb2706cec5d61d57c1e97730d0be8e6f9
MD5 105bb87c899390ac3d8055d9ee43a1fd
SHA1 2c3aa4e14a0e15f17133f2180b22c98faea9c10b
SHA512 30216dd53f45824e6ed4872d558bb6f9c179a66c05d2af34a085a76e6f99fa82cf1ed2fa83103bcf82d4dca5aeb226fc0db8adfd0281c4aa6bef59c36b69bc5f
SSDEEP 12288:R0ywjWtUO+Oke04VGUl6vhOiue+bhPrRx4vSZqB7Y0lnMyC2+EKg55vZuYtx:uCwsdPJyC29xBZuYH
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

643072

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\BuildArea\GT_Lilo_3.2_All\20080409.GTL3.2A.140\esg\lilo\3.2\binaries\win-vc8\Win32\Release\AdobeLinguistic.pdb

kernel32

GetLastError MultiByteToWideChar WideCharToMultiByte FreeLibrary GetProcAddress LoadLibraryW GetTempFileNameW GetTempPathW GetVersionExW FindClose FindNextFileW FindFirstFileW CloseHandle WaitForSingleObject CreateMutexW ReleaseMutex CreateThread CreateMailslotW ReadFile WriteFile CreateFileW TerminateThread GlobalFree GlobalLock GlobalAlloc GlobalUnlock GlobalHandle GetCurrentProcessId GetCurrentThreadId GetTickCount QueryPerformanceCounter DisableThreadLibraryCalls IsDebuggerPresent SetUnhandledExceptionFilter UnhandledExceptionFilter GetCurrentProcess TerminateProcess InterlockedCompareExchange Sleep RaiseException LoadLibraryA InterlockedExchange LocalAlloc GetSystemTimeAsFileTime

shell32

SHGetMalloc SHGetSpecialFolderLocation SHGetPathFromIDListW

ole32

CoTaskMemFree CoUninitialize CoInitialize CoCreateInstance CoGetClassObject CoTaskMemAlloc

oleaut32

SysFreeString

msvcr80

_except_handler4_common ?_type_info_dtor_internal_method@type_info@@QAEXXZ _crt_debugger_hook __CppXcptFilter _adjust_fdiv _amsg_exit _initterm_e ??4exception@std@@QAEAAV01@ABV01@@Z _initterm _encoded_null free _malloc_crt _decode_pointer __CxxFrameHandler3 _lock _encode_pointer __dllonexit _unlock ?terminate@@YAXXZ memchr sprintf isdigit strcmp qsort strpbrk _lseek _write _read _close _open _wopen strrchr memmove __iob_func fprintf strncmp tolower strchr _swprintf _itoa atoi _getpid memset _wremove _errno _wrmdir _wmkdir strncpy ?unexpected@@YAXXZ __RTDynamicCast memcpy memmove_s _invalid_parameter_noinfo ??2@YAPAXI@Z _purecall ??0exception@std@@QAE@XZ ?what@exception@std@@UBEPBDXZ ??0exception@std@@QAE@ABQBD@Z _CxxThrowException ??_U@YAPAXI@Z ??_V@YAXPAX@Z ??3@YAXPAX@Z __clean_type_info_names_internal ??0exception@std@@QAE@ABV01@@Z ??1exception@std@@UAE@XZ _onexit

msvcp80

??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@PB_W@Z ?compare@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEHIIPBDI@Z ??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@PBD@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBD@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@AAD@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@JH@Z ?begin@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?end@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE?AV?$_String_iterator@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@2@XZ ?find_last_of@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z ?substr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBE?AV12@II@Z ?clear@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEXXZ ??$?8_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@PB_W@Z ?find@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEIPB_WI@Z ?substr@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBE?AV12@II@Z ?npos@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@2IB ?rfind@?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QBEI_WI@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??Y?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@PB_W@Z ??$?ODU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z ?push_back@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXD@Z ?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@@Z ?find@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEIPBDII@Z ?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB ?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z ?clear@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXXZ ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z ??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@D@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??0?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@ABV01@@Z ??$?M_WU?$char_traits@_W@std@@V?$allocator@_W@1@@std@@YA_NABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@0@0@Z ??Y?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??$?8DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@PBD@Z ?_Xlen@_String_base@std@@SAXXZ ?_Xran@_String_base@std@@SAXXZ ??$?MDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA_NABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@0@Z ?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z ??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z ?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z ?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z ?uncaught_exception@std@@YA_NXZ ?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ ?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ ?_Unlock@_Mutex@std@@QAEXXZ ?_Lock@_Mutex@std@@QAEXXZ ??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PB_WHH@Z ??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ ??1?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAE@XZ ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z ??$?5DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z ??4?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@QAEAAV01@ABV01@@Z ??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z ??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z ??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z

??0?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QAE@ABV01@@Z ??0?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QAE@PAUStringValue@LM_UniString@1@@Z ??0HyphenedWord@devtech@@QAE@ABU01@@Z ??0HyphenedWord@devtech@@QAE@XZ ??0IDictionary@devtech@@QAE@ABV01@@Z ??0IDictionary@devtech@@QAE@XZ ??0IDictionarySet@devtech@@QAE@ABV01@@Z ??0IDictionarySet@devtech@@QAE@XZ ??0IHyphenService@devtech@@IAE@XZ ??0IHyphenService@devtech@@QAE@ABV01@@Z ??0IHyphenWord@devtech@@QAE@ABV01@@Z ??0IHyphenWord@devtech@@QAE@XZ ??0IProvider@devtech@@QAE@ABV01@@Z ??0IProvider@devtech@@QAE@XZ ??0ISpellCheckedWord@devtech@@QAE@ABV01@@Z ??0ISpellCheckedWord@devtech@@QAE@XZ ??0ISpellingService@devtech@@IAE@XZ ??0ISpellingService@devtech@@QAE@ABV01@@Z ??0IThesaurusWord@devtech@@QAE@ABV01@@Z ??0IThesaurusWord@devtech@@QAE@XZ ??0ITokenizer@devtech@@IAE@XZ ??0ITokenizer@devtech@@QAE@ABV01@@Z ??0IWordList@devtech@@QAE@ABV01@@Z ??0IWordList@devtech@@QAE@XZ ??0Iterator@IThesaurusWord@devtech@@IAE@PAV12@H@Z ??0Iterator@IThesaurusWord@devtech@@QAE@ABV012@@Z ??0LM_FileSpec@devtech@@QAE@ABV01@@Z ??0LM_FileSpec@devtech@@QAE@PBD@Z ??0LM_FileSpec@devtech@@QAE@PBG@Z ??0LM_FileSpec@devtech@@QAE@PB_W@Z ??0LM_FileSpec@devtech@@QAE@XZ ??0LM_HyphenPoint@devtech@@QAE@GEE@Z ??0LM_LinguisticService@devtech@@QAE@ABV01@@Z ??0LM_LinguisticService@devtech@@QAE@XZ ??0LM_ThesaurusEntry@devtech@@QAE@ABU01@@Z ??0LM_ThesaurusEntry@devtech@@QAE@XZ ??0LM_UniString@devtech@@QAE@ABV01@@Z ??0LM_UniString@devtech@@QAE@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ??0LM_UniString@devtech@@QAE@PBD@Z ??0LM_UniString@devtech@@QAE@PBGI@Z ??0LM_UniString@devtech@@QAE@PB_W@Z ??0LM_UniString@devtech@@QAE@XZ ??0LM_exception@devtech@@QAE@ABV01@@Z ??0LM_exception@devtech@@QAE@F@Z ??0LM_exception@devtech@@QAE@FPBD@Z ??0LinguisticManager@devtech@@QAE@PAXABVLM_FileSpec@1@@Z ??0LinguisticManager@devtech@@QAE@XZ ??0PtAttributeElement@IHyphenWord@devtech@@QAE@EH@Z ??0RCObject@devtech@@IAE@ABV01@@Z ??0RCObject@devtech@@IAE@XZ ??1?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QAE@XZ ??1HyphenedWord@devtech@@QAE@XZ ??1IDictionary@devtech@@UAE@XZ ??1IDictionarySet@devtech@@UAE@XZ ??1IHyphenService@devtech@@MAE@XZ ??1IHyphenWord@devtech@@UAE@XZ ??1IProvider@devtech@@UAE@XZ ??1ISpellCheckedWord@devtech@@UAE@XZ ??1ISpellingService@devtech@@MAE@XZ ??1IThesaurusWord@devtech@@UAE@XZ ??1ITokenizer@devtech@@MAE@XZ ??1IWordList@devtech@@UAE@XZ ??1Iterator@IThesaurusWord@devtech@@QAE@XZ ??1LM_FileSpec@devtech@@UAE@XZ ??1LM_LinguisticService@devtech@@UAE@XZ ??1LM_ThesaurusEntry@devtech@@QAE@XZ ??1LM_UniString@devtech@@QAE@XZ ??1LM_exception@devtech@@UAE@XZ ??1LinguisticManager@devtech@@QAE@XZ ??1RCObject@devtech@@MAE@XZ ??4?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QAEAAV01@ABV01@@Z ??4HyphenedWord@devtech@@QAEAAU01@ABU01@@Z ??4IDictionary@devtech@@QAEAAV01@ABV01@@Z ??4IDictionarySet@devtech@@QAEAAV01@ABV01@@Z ??4IHyphenService@devtech@@QAEAAV01@ABV01@@Z ??4IHyphenWord@devtech@@QAEAAV01@ABV01@@Z ??4IProvider@devtech@@QAEAAV01@ABV01@@Z ??4ISpellCheckedWord@devtech@@QAEAAV01@ABV01@@Z ??4ISpellingService@devtech@@QAEAAV01@ABV01@@Z ??4IThesaurusWord@devtech@@QAEAAV01@ABV01@@Z ??4ITokenizer@devtech@@QAEAAV01@ABV01@@Z ??4IWordList@devtech@@QAEAAV01@ABV01@@Z ??4Iterator@IThesaurusWord@devtech@@QAEAAV012@ABV012@@Z ??4LM_FileSpec@devtech@@QAEAAV01@ABV01@@Z ??4LM_HyphenPoint@devtech@@QAEAAU01@ABU01@@Z ??4LM_LinguisticService@devtech@@QAEAAV01@ABV01@@Z ??4LM_ThesaurusEntry@devtech@@QAEAAU01@ABU01@@Z ??4LM_UniString@devtech@@QAEAAV01@ABV01@@Z ??4LM_exception@devtech@@QAEAAV01@ABV01@@Z ??4LinguisticManager@devtech@@QAEAAV01@ABV01@@Z ??4PtAttributeElement@IHyphenWord@devtech@@QAEAAU012@ABU012@@Z ??4RCObject@devtech@@IAEAAV01@ABV01@@Z ??6devtech@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVLM_FileSpec@0@@Z ??6devtech@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@ABVLM_UniString@0@@Z ??6devtech@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@std@@AAV12@PBVIWordList@0@@Z ??8LM_UniString@devtech@@QBE_NABV01@@Z ??ALM_UniString@devtech@@QAEAAGH@Z ??ALM_UniString@devtech@@QBEABGH@Z ??BLM_FileSpec@devtech@@QBE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ??BLM_FileSpec@devtech@@QBEPBDXZ ??C?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QBEPAUStringValue@LM_UniString@1@XZ ??CIterator@IThesaurusWord@devtech@@QAEPAULM_ThesaurusEntry@2@XZ ??D?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QBEAAUStringValue@LM_UniString@1@XZ ??DIterator@IThesaurusWord@devtech@@QAEAAULM_ThesaurusEntry@2@XZ ??EIterator@IThesaurusWord@devtech@@QAEAAV012@H@Z ??MLM_UniString@devtech@@QBE_NABV01@@Z ??YIterator@IThesaurusWord@devtech@@QAEAAV012@H@Z ??YLM_FileSpec@devtech@@QAEAAV01@ABV01@@Z ??_7IDictionary@devtech@@6B@ ??_7IDictionarySet@devtech@@6B@ ??_7IHyphenService@devtech@@6B@ ??_7IHyphenWord@devtech@@6B@ ??_7IProvider@devtech@@6B@ ??_7ISpellCheckedWord@devtech@@6B@ ??_7ISpellingService@devtech@@6B@ ??_7IThesaurusWord@devtech@@6B@ ??_7ITokenizer@devtech@@6B@ ??_7IWordList@devtech@@6B@ ??_7LM_FileSpec@devtech@@6B@ ??_7LM_LinguisticService@devtech@@6B@ ??_7LM_exception@devtech@@6B@ ??_7RCObject@devtech@@6B@ ??_F?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@QAEXXZ ?AddWordPair@LinguisticManager@devtech@@QAEXPAVIDictionary@2@ABVLM_UniString@2@1@Z ?CloseCustomDictionary@LinguisticManager@devtech@@QAEXPAVIDictionary@2@@Z ?CloseUserDictionary@LinguisticManager@devtech@@QAEXPAVIDictionary@2@@Z ?ConvertBSTR@LM_UniString@devtech@@QAEXQA_W@Z ?CopyUniChar@LM_UniString@devtech@@QBEKPAGK@Z ?CreateCustomDictionary@LinguisticManager@devtech@@QAEPAVIDictionary@2@ABVLM_UniString@2@G@Z ?CreateLinguisticService@LinguisticManager@devtech@@QAEPAVLM_LinguisticService@2@PAVIProvider@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?CreateLinguisticService@LinguisticManager@devtech@@QAEPAVLM_LinguisticService@2@PAVIProvider@2@G@Z ?CreateUnicode@LinguisticManager@devtech@@QAEPAVLM_LinguisticService@2@PAVIDictionarySet@2@PAVIProvider@2@@Z ?CreateUserDictionary@LinguisticManager@devtech@@QAEPAVIDictionary@2@ABVLM_UniString@2@G_N@Z ?DeleteCustomDictionary@LinguisticManager@devtech@@QAEXPAVIDictionary@2@@Z ?DeleteUserDictionary@LinguisticManager@devtech@@QAEXPAVIDictionary@2@@Z ?EnableAllLanguageUserDictionary@LinguisticManager@devtech@@QAEX_N@Z ?ErrorCode@LM_exception@devtech@@QAEFXZ ?ExportCustomDictionary@LinguisticManager@devtech@@QAEXPAVIDictionary@2@AAV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@PAVIProvider@2@@Z ?ExportUserDictionary@LinguisticManager@devtech@@QAEXPAVIDictionary@2@AAVLM_FileSpec@2@PAVIProvider@2@@Z ?FindDictionarySetForLanguage@LinguisticManager@devtech@@QAEPAVIDictionarySet@2@G@Z ?FindUserDictionarySetForLanguage@LinguisticManager@devtech@@QAEPAVIDictionarySet@2@G@Z ?GetDefaultProvider@LinguisticManager@devtech@@QAEPAVIProvider@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@G@Z ?GetIterIndex@IThesaurusWord@devtech@@IAEHVIterator@12@@Z ?GetLanguageIndexList@LinguisticManager@devtech@@QAEABV?$map@GV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@G@2@V?$allocator@U?$pair@$$CBGV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@2@@std@@G@Z ?GetLanguageIndexList@LinguisticManager@devtech@@QAEXAAV?$map@GV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@U?$less@G@2@V?$allocator@U?$pair@$$CBGV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@std@@@2@@std@@G@Z ?GetLanguageName@LinguisticManager@devtech@@QAE?BVLM_UniString@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@0@Z ?GetProviderList@LinguisticManager@devtech@@QAEABV?$list@PAVIProvider@devtech@@V?$allocator@PAVIProvider@devtech@@@std@@@std@@XZ ?GetProviderList@LinguisticManager@devtech@@QAEXAAV?$list@PAVIProvider@devtech@@V?$allocator@PAVIProvider@devtech@@@std@@@std@@@Z ?GetUniCharPtr@LM_UniString@devtech@@QBEPBGXZ ?GetVersionInfo@LinguisticManager@devtech@@QBEGXZ ?ImportCustomDictionary@LinguisticManager@devtech@@QAEPAVIDictionary@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVLM_UniString@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@5@@Z ?ImportUserDictionary@LinguisticManager@devtech@@QAEPAVIDictionary@2@ABVLM_FileSpec@2@ABVLM_UniString@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?LMUtilLookupLangID@devtech@@YAHG@Z ?OpenCustomDictionary@LinguisticManager@devtech@@QAEPAVIDictionary@2@ABV?$basic_string@_WU?$char_traits@_W@std@@V?$allocator@_W@2@@std@@ABVLM_UniString@2@PAVIProvider@2@@Z ?OpenUserDictionary@LinguisticManager@devtech@@QAEPAVIDictionary@2@ABVLM_FileSpec@2@ABVLM_UniString@2@PAVIProvider@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@_N@Z ?Release@LinguisticManager@devtech@@QAEXPAVLM_LinguisticService@2@@Z ?ReleaseLinguisticService@LinguisticManager@devtech@@QAEXPAVLM_LinguisticService@2@@Z ?Result@LM_exception@devtech@@QAEFXZ ?SetToEmptyString@LM_UniString@devtech@@AAEXXZ ?UserDictionaryExtension@LinguisticManager@devtech@@QAE?BV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@XZ ?addReference@RCObject@devtech@@QAEXXZ ?begin@IThesaurusWord@devtech@@UAE?AVIterator@12@XZ ?c_str@LM_UniString@devtech@@QBEPBGXZ ?clear@LM_UniString@devtech@@QAEXXZ ?compare@LM_UniString@devtech@@QBEHABV12@@Z ?createInstance@IHyphenService@devtech@@SAPAV12@PAVIProvider@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?createInstance@ISpellingService@devtech@@SAPAV12@PAVIProvider@2@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?createInstance@ITokenizer@devtech@@SAPAV12@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@@Z ?empty@LM_UniString@devtech@@QBE_NXZ ?end@IThesaurusWord@devtech@@UAE?AVIterator@12@XZ ?init@?$RCPtr@UStringValue@LM_UniString@devtech@@@devtech@@AAEXXZ ?isShareable@RCObject@devtech@@QBE_NXZ ?isShared@RCObject@devtech@@QBE_NXZ ?language@LM_LinguisticService@devtech@@QAEGXZ ?length@LM_UniString@devtech@@QBEKXZ ?markUnshareable@RCObject@devtech@@QAEXXZ ?removeReference@RCObject@devtech@@QAEXXZ ?size@LM_UniString@devtech@@QBEKXZ ?what@LM_exception@devtech@@UBEPBDXZ

Name

.text

Size

364KB

Virtual Size

362KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

200KB

Virtual Size

198KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.text

Size

132KB

Virtual Size

132KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

105bb87c899390ac3d8055d9ee43a1fd_JaffaCakes118

kernel32

shell32

ole32

oleaut32

msvcr80

msvcp80

generic