C:\onegit\ucb\wntmsci12.pro\bin\ucpext.uno.pdb
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
35aa3600e1befeac5744e738701c4d3f_JaffaCakes118.dll
Resource
win7-20240705-en
windows7-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
35aa3600e1befeac5744e738701c4d3f_JaffaCakes118.dll
Resource
win10v2004-20240709-en
windows10-2004-x64
1 signatures
150 seconds
General
-
Target
35aa3600e1befeac5744e738701c4d3f_JaffaCakes118
-
Size
77KB
-
MD5
35aa3600e1befeac5744e738701c4d3f
-
SHA1
14046bc735f9b3caebab55d47285f89c72677b1a
-
SHA256
d323d1fc71d8bad4d8c92275523243ee6f1de332f9b564adbadc841b16f67dde
-
SHA512
e328be24a779e93639f36c73b21fc0f7790f4150245bd2e6386be754ad69633cc426a97364a73a909cb1f9f60a24f48992e4e9d873d33ec0ac7ebc260525dd92
-
SSDEEP
1536:8IluoSL6hiAfUnqDhz/9hu6qn/w+gjN5o2O0UdKOl1s:JoNqYqDhz/9UNnIG2O0UdK21
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 35aa3600e1befeac5744e738701c4d3f_JaffaCakes118
Files
-
35aa3600e1befeac5744e738701c4d3f_JaffaCakes118.dll windows:5 windows x86 arch:x86
c993946627fb14f014dc97c57144a6fa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ucbhelper4msc
?executeCommand@Content@ucbhelper@@QAE?AVAny@uno@star@sun@com@@ABVOUString@rtl@@ABV34567@@Z
?getCommandInfo@ContentImplHelper@ucbhelper@@IAE?AV?$Reference@VXCommandInfo@ucb@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@4567@E@Z
?getPropertySetInfo@ContentImplHelper@ucbhelper@@IAE?AV?$Reference@VXPropertySetInfo@beans@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@4567@E@Z
?cancelCommandExecution@ucbhelper@@YAXABVAny@uno@star@sun@com@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@3456@@Z
??1ResultSetImplHelper@ucbhelper@@UAE@XZ
??0ResultSetImplHelper@ucbhelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABUOpenCommandArgument2@ucb@456@@Z
?queryInterface@ResultSetImplHelper@ucbhelper@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?acquire@ResultSetImplHelper@ucbhelper@@UAAXXZ
?release@ResultSetImplHelper@ucbhelper@@UAAXXZ
?getTypes@ResultSetImplHelper@ucbhelper@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?getImplementationId@ResultSetImplHelper@ucbhelper@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getImplementationName@ResultSetImplHelper@ucbhelper@@UAA?AVOUString@rtl@@XZ
?supportsService@ResultSetImplHelper@ucbhelper@@UAAEABVOUString@rtl@@@Z
?getSupportedServiceNames@ResultSetImplHelper@ucbhelper@@UAA?AV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@XZ
?dispose@ResultSetImplHelper@ucbhelper@@UAAXXZ
?addEventListener@ResultSetImplHelper@ucbhelper@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?removeEventListener@ResultSetImplHelper@ucbhelper@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?getStaticResultSet@ResultSetImplHelper@ucbhelper@@UAA?AV?$Reference@VXResultSet@sdbc@star@sun@com@@@uno@star@sun@com@@XZ
?setListener@ResultSetImplHelper@ucbhelper@@UAAXABV?$Reference@VXDynamicResultSetListener@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?connectToCache@ResultSetImplHelper@ucbhelper@@UAAXABV?$Reference@VXDynamicResultSet@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?getCapabilities@ResultSetImplHelper@ucbhelper@@UAAFXZ
??0ResultSet@ucbhelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@UProperty@beans@star@sun@com@@@3456@ABV?$Reference@VResultSetDataSupplier@ucbhelper@@@rtl@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@3456@@Z
?createCursor@Content@ucbhelper@@QAE?AV?$Reference@VXResultSet@sdbc@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@VOUString@rtl@@@4567@W4ResultSetInclude@2@@Z
?getEnvironment@ResultSet@ucbhelper@@QAEABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@XZ
?getProperties@ResultSet@ucbhelper@@QAEABV?$Sequence@UProperty@beans@star@sun@com@@@uno@star@sun@com@@XZ
??0ContentIdentifier@ucbhelper@@QAE@ABVOUString@rtl@@@Z
??1ResultSet@ucbhelper@@UAE@XZ
?release@ResultSet@ucbhelper@@UAAXXZ
?acquire@ResultSet@ucbhelper@@UAAXXZ
?queryInterface@ResultSet@ucbhelper@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
?setParent@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?getParent@ContentImplHelper@ucbhelper@@UAA?AV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@XZ
?removeCommandInfoChangeListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXCommandInfoChangeListener@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?addCommandInfoChangeListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXCommandInfoChangeListener@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?removePropertySetInfoChangeListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXPropertySetInfoChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?addPropertySetInfoChangeListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXPropertySetInfoChangeListener@beans@star@sun@com@@@uno@star@sun@com@@@Z
?removeProperty@ContentImplHelper@ucbhelper@@UAAXABVOUString@rtl@@@Z
?addProperty@ContentImplHelper@ucbhelper@@UAAXABVOUString@rtl@@FABVAny@uno@star@sun@com@@@Z
?removePropertiesChangeListener@ContentImplHelper@ucbhelper@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?addPropertiesChangeListener@ContentImplHelper@ucbhelper@@UAAXABV?$Sequence@VOUString@rtl@@@uno@star@sun@com@@ABV?$Reference@VXPropertiesChangeListener@beans@star@sun@com@@@4567@@Z
?createCommandIdentifier@ContentImplHelper@ucbhelper@@UAAJXZ
?removeContentEventListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXContentEventListener@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?addContentEventListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXContentEventListener@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?removeEventListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?addEventListener@ContentImplHelper@ucbhelper@@UAAXABV?$Reference@VXEventListener@lang@star@sun@com@@@uno@star@sun@com@@@Z
?dispose@ContentImplHelper@ucbhelper@@UAAXXZ
?supportsService@ContentImplHelper@ucbhelper@@UAAEABVOUString@rtl@@@Z
?getImplementationId@ContentImplHelper@ucbhelper@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getTypes@ContentImplHelper@ucbhelper@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?release@ContentImplHelper@ucbhelper@@UAAXXZ
?acquire@ContentImplHelper@ucbhelper@@UAAXXZ
?queryInterface@ContentImplHelper@ucbhelper@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0ContentImplHelper@ucbhelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABV?$Reference@VContentProviderImplHelper@ucbhelper@@@rtl@@ABV?$Reference@VXContentIdentifier@ucb@star@sun@com@@@3456@@Z
?getIdentifier@ContentImplHelper@ucbhelper@@UAA?AV?$Reference@VXContentIdentifier@ucb@star@sun@com@@@uno@star@sun@com@@XZ
??1ContentImplHelper@ucbhelper@@UAE@XZ
??0Content@ucbhelper@@QAE@ABVOUString@rtl@@ABV?$Reference@VXCommandEnvironment@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?getPropertyValues@Content@ucbhelper@@QAE?AV?$Sequence@VAny@uno@star@sun@com@@@uno@star@sun@com@@ABV?$Sequence@VOUString@rtl@@@4567@@Z
?appendObject@PropertyValueSet@ucbhelper@@QAEXABVOUString@rtl@@ABVAny@uno@star@sun@com@@@Z
??1Content@ucbhelper@@QAE@XZ
??1PropertyValueSet@ucbhelper@@UAE@XZ
?release@PropertyValueSet@ucbhelper@@UAAXXZ
?acquire@PropertyValueSet@ucbhelper@@UAAXXZ
?queryInterface@PropertyValueSet@ucbhelper@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0PropertyValueSet@ucbhelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
?appendString@PropertyValueSet@ucbhelper@@QAEXABVOUString@rtl@@0@Z
?appendBoolean@PropertyValueSet@ucbhelper@@QAEXABVOUString@rtl@@E@Z
?appendVoid@PropertyValueSet@ucbhelper@@QAEXABVOUString@rtl@@@Z
??1ContentIdentifier@ucbhelper@@UAE@XZ
?release@ContentIdentifier@ucbhelper@@UAAXXZ
?acquire@ContentIdentifier@ucbhelper@@UAAXXZ
?queryInterface@ContentIdentifier@ucbhelper@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0ContentIdentifier@ucbhelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@ABVOUString@rtl@@@Z
?queryExistingContent@ContentProviderImplHelper@ucbhelper@@IAE?AV?$Reference@VContentImplHelper@ucbhelper@@@rtl@@ABV?$Reference@VXContentIdentifier@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?registerNewContent@ContentProviderImplHelper@ucbhelper@@IAEXABV?$Reference@VXContent@ucb@star@sun@com@@@uno@star@sun@com@@@Z
?compareContentIds@ContentProviderImplHelper@ucbhelper@@UAAJABV?$Reference@VXContentIdentifier@ucb@star@sun@com@@@uno@star@sun@com@@0@Z
?supportsService@ContentProviderImplHelper@ucbhelper@@UAAEABVOUString@rtl@@@Z
?getImplementationId@ContentProviderImplHelper@ucbhelper@@UAA?AV?$Sequence@C@uno@star@sun@com@@XZ
?getTypes@ContentProviderImplHelper@ucbhelper@@UAA?AV?$Sequence@VType@uno@star@sun@com@@@uno@star@sun@com@@XZ
?release@ContentProviderImplHelper@ucbhelper@@UAAXXZ
?acquire@ContentProviderImplHelper@ucbhelper@@UAAXXZ
?queryInterface@ContentProviderImplHelper@ucbhelper@@UAA?AVAny@uno@star@sun@com@@ABVType@4567@@Z
??0ContentProviderImplHelper@ucbhelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
??1ContentProviderImplHelper@ucbhelper@@UAE@XZ
comphelpmsc
??1ComponentContext@comphelper@@QAE@XZ
??0ComponentContext@comphelper@@QAE@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@uno@star@sun@com@@@Z
?getSingleton@ComponentContext@comphelper@@QBE?AV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@PBD@Z
??0ComponentContext@comphelper@@QAE@ABV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@@Z
?getLegacyServiceFactory@ComponentContext@comphelper@@QBE?AV?$Reference@VXMultiServiceFactory@lang@star@sun@com@@@uno@star@sun@com@@XZ
cppuhelper3msc
?component_getFactoryHelper@cppu@@YAPAXPBDPAX1QBUImplementationEntry@1@@Z
?createOneInstanceComponentFactory@cppu@@YA?AV?$Reference@VXSingleComponentFactory@lang@star@sun@com@@@uno@star@sun@com@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@3456@@ZABVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
?queryAdapter@OWeakObject@cppu@@UAA?AV?$Reference@VXAdapter@uno@star@sun@com@@@uno@star@sun@com@@XZ
cppu3
uno_any_destruct
uno_type_any_construct
uno_any_construct
typelib_typedescriptionreference_acquire
uno_type_any_assign
uno_type_sequence_reference2One
uno_type_destructData
uno_type_sequence_construct
typelib_static_sequence_type_init
typelib_static_type_getByTypeClass
typelib_static_type_init
uno_type_assignData
cppu_unsatisfied_iquery_msg
cppu_unsatisfied_iset_msg
typelib_typedescriptionreference_release
sal3
osl_destroyMutex
osl_createMutex
osl_decrementInterlockedCount
rtl_uriDecode
rtl_uString_release
rtl_uStringbuffer_newFromStr_WithLength
rtl_uString_newConcat
rtl_ustr_lastIndexOfChar_WithLength
rtl_ustr_indexOfChar_WithLength
rtl_ustr_asciil_reverseEquals_WithLength
rtl_ustr_shortenedCompare_WithLength
rtl_uString_new
rtl_uString_acquire
rtl_uriEncode
rtl_getUriCharClass
rtl_ustr_compare_WithLength
rtl_str_getLength
osl_incrementInterlockedCount
rtl_uStringbuffer_insert_ascii
rtl_uStringbuffer_insert
rtl_uString_new_WithLength
rtl_freeMemory
rtl_allocateMemory
osl_releaseMutex
osl_acquireMutex
rtl_uString_newToAsciiLowerCase
rtl_uString_newFromStr_WithLength
rtl_ustr_compareIgnoreAsciiCase_WithLength
rtl_uString_assign
rtl_string2UString
salhelper3msc
??2SimpleReferenceObject@salhelper@@SAPAXI@Z
??1SimpleReferenceObject@salhelper@@MAE@XZ
??3SimpleReferenceObject@salhelper@@SAXPAX@Z
msvcr90
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_except_handler4_common
__clean_type_info_names_internal
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
__RTDynamicCast
??2@YAPAXI@Z
_invalid_parameter_noinfo
_purecall
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
??3@YAXPAX@Z
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
??0exception@std@@QAE@ABQBDH@Z
??1exception@std@@UAE@XZ
msvcp90
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
GetVersionInfo
component_getFactory
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ