G:\CXR18\BSF\intel_a\code\bin\CATImmVPMLinksProperty.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4323cc284f2179efaaff1c9232f8d187_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
4323cc284f2179efaaff1c9232f8d187_JaffaCakes118.dll
Resource
win10v2004-20240709-en
General
-
Target
4323cc284f2179efaaff1c9232f8d187_JaffaCakes118
-
Size
199KB
-
MD5
4323cc284f2179efaaff1c9232f8d187
-
SHA1
639095756b67d66a139536e8a138a78ef1cd2aa1
-
SHA256
c4d1b1d16958c1fcbf2da835185224bbbec055fc05207e961a886526adec78d3
-
SHA512
0a5411838d372e288bb1d79fc85a7d75f433f803666d3eb69e0fc73ebb5f17af988f1d9797777482954ba07be745aa7ba450182c520f1a8f28c6eb33f39dc6fa
-
SSDEEP
6144:DBXubdbi5xegRpCtwNwlLckn6pEzh8Vts/WnxMBOWoM:D8iCgRQmNALckndziVts/ux4oM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4323cc284f2179efaaff1c9232f8d187_JaffaCakes118
Files
-
4323cc284f2179efaaff1c9232f8d187_JaffaCakes118.dll windows:4 windows x86 arch:x86
32fb9bd2910c4eda79a1b1ebf4910348
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
js0group
?GetTypeOfClass@CATMetaClass@@QBG?AW4ENUMTypeOfClass@@XZ
?Tie_Destruct@@YAXPAUIUnknown@@PAPAVCATBaseUnknown@@W4ENUMTypeOfClass@@J@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PAD@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@ABU_GUID@@@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPADPAX@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDABU_GUID@@PAX@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZABU_GUID@@2@Z
?IsA@CATBaseUnknown@@UBEPBDXZ
?RemoveSubscriberCallbacks@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@@Z
?RemoveCallbacksOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPAX@Z
?RemoveCallback@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@J@Z
?AddCallback@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@Z2@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?IsNull@CATBaseUnknown@@UBEHXZ
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?IsAKindOf@CATBaseUnknown@@UBEHPBD@Z
?SetFWname@CATMetaClass@@QAEXPBD@Z
?Tie_Release@@YAKPAHPAPAVCATBaseUnknown@@PAV1@W4ENUMTypeOfClass@@PAJ@Z
?Tie_GetTypeInfoCount@@YAJPAUIDispatch@@PAVCATMetaClass@@PAI@Z
?Tie_GetTypeInfo@@YAJPAUIDispatch@@PAVCATMetaClass@@IKPAPAUITypeInfo@@@Z
?Tie_GetIDsOfNames@@YAJPAUIDispatch@@PAVCATMetaClass@@ABU_GUID@@PAPAGIKPAJ@Z
?Tie_Invoke@@YAJPAUIDispatch@@PAVCATMetaClass@@JABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Run@Tie_StackCtx@@QAEPAVCATBaseUnknown@@PAV2@0@Z
??8CATString@@QBEHPBD@Z
??2CATBaseUnknown@@SAPAXI@Z
??1CATUnicodeString@@QAE@XZ
??1CATString@@QAE@XZ
?BuildMessage@CATMsgCatalog@@SA?BVCATUnicodeString@@ABVCATString@@0PAV2@HABV2@@Z
??0CATString@@QAE@QBD@Z
??0CATUnicodeString@@QAE@QBD@Z
?IsAKindOf@CATMetaClass@@QBEHPBD@Z
??3CATBaseUnknown@@SAXPAX@Z
?Tie_Construct@@YAPAVCATBaseUnknown@@PAUIUnknown@@PAVCATMetaClass@@PAPAV1@HPAV1@ABU_GUID@@W4ENUMTypeOfClass@@3P6APAV1@XZ32@Z
??0CATFillDictionary@@QAE@PBVCATMetaClass@@0PAX1H@Z
?Tie_Query@@YAJPAUIUnknown@@PAVCATBaseUnknown@@1PAVCATMetaClass@@HABU_GUID@@PAPAX@Z
??8CATUnicodeString@@QBEHABV0@@Z
??BCATUnicodeString@@QBEPBDXZ
?GetCallbackManager@CATEventSubscriber@@UAEPAVCATCallbackManager@@XZ
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?Release@CATBaseUnknown@@UAGKXZ
?AddRef@CATBaseUnknown@@UAGKXZ
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?fct_RetrieveMetaObject@@YAPAVCATMetaClass@@PBDW4ENUMTypeOfClass@@PAV1@00J@Z
??0CATFillDictionary@@QAE@ABU_GUID@@0PAX1@Z
?IsA@CATMetaClass@@QBEPBDXZ
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
??2CATMetaClass@@SAPAXI@Z
??0CATMetaClass@@QAE@PBU_GUID@@PBDPAV0@2W4ENUMTypeOfClass@@@Z
?CLSID_CATMetaClass@@3U_GUID@@B
?AddDictionary@@YAPBUinfo_dic@@PBU_GUID@@0PBD11PAX12HHH1@Z
?Tie_AddRef@@YAKPAVCATBaseUnknown@@W4ENUMTypeOfClass@@PAJ@Z
catobjectmodelerbase
?RemoveInterfaceSubscriptions@CATExtensionAdapter@@UAEXPAVCATInterfaceEvents@@PAD@Z
?ExternalBindPointedObjects@CATExtensionAdapter@@UAE?AVCATListValCATBaseUnknown_var@@QBDPAVCATIBindParameters@@@Z
?GetStoredName@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@ABVCATUnicodeString@@@Z
?FillArea@CATExtensionAdapter@@UAEXABVCATUnicodeString@@V_SEQUENCE_octet@@E@Z
?IsAFilledArea@CATExtensionAdapter@@UAEEABVCATUnicodeString@@@Z
?ListSupportedAreasIdentifier@CATExtensionAdapter@@UAEXPAVCATListValCATUnicodeString@@AAE@Z
?GetAdditionalInfos@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetLocatorType@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetDocument@CATExtensionAdapter@@UAEPAVCATDocument@@XZ
?GetIdentifier@CATExtensionAdapter@@UAEXAAV_SEQUENCE_octet@@AAE@Z
?GetSymbolicLink@CATExtensionAdapter@@UAEPAVCATISymbolicLink@@XZ
?GetName_B@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@W4CATNameKind@@@Z
?GetName@CATExtensionAdapter@@UAEPADW4CATNameKind@@@Z
?GetInverseLinks@CATExtensionAdapter@@UAE?AVCATListValCATBaseUnknown_var@@XZ
?RemoveInverseLink@CATExtensionAdapter@@UAEXVCATBaseUnknown_var@@@Z
?AddInverseLink@CATExtensionAdapter@@UAEXVCATBaseUnknown_var@@@Z
?GetCallbackManager@CATExtensionAdapter@@UAEPAVCATCallbackManager@@XZ
?RemoveSubscriptionsOn@CATExtensionAdapter@@UAEXPAVCATInterfaceEvents@@PBDPADPAX@Z
?AddSubscription@CATExtensionAdapter@@UAEJPAVCATInterfaceEvents@@PBDP8CATBaseUnknown@@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?MetaObject@CATExtensionAdapter@@SGPAVCATMetaClass@@XZ
??1CATIGenericFactory@@UAE@XZ
?MetaObject@CATIGenericFactory@@SGPAVCATMetaClass@@XZ
?AddInverseLink@CATImplementationAdapter@@UAEXVCATBaseUnknown_var@@@Z
?RemoveInverseLink@CATImplementationAdapter@@UAEXVCATBaseUnknown_var@@@Z
?GetInverseLinks@CATImplementationAdapter@@UAE?AVCATListValCATBaseUnknown_var@@XZ
?GetName@CATImplementationAdapter@@UAEPADW4CATNameKind@@@Z
?GetName_B@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@W4CATNameKind@@@Z
?GetSymbolicLink@CATImplementationAdapter@@UAEPAVCATISymbolicLink@@XZ
?GetIdentifier@CATImplementationAdapter@@UAEXAAV_SEQUENCE_octet@@AAE@Z
?GetDocument@CATImplementationAdapter@@UAEPAVCATDocument@@XZ
?GetLocatorType@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetAdditionalInfos@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?ListSupportedAreasIdentifier@CATImplementationAdapter@@UAEXPAVCATListValCATUnicodeString@@AAE@Z
?IsAFilledArea@CATImplementationAdapter@@UAEEABVCATUnicodeString@@@Z
?FillArea@CATImplementationAdapter@@UAEXABVCATUnicodeString@@V_SEQUENCE_octet@@E@Z
?GetStoredName@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@ABVCATUnicodeString@@@Z
?ExternalBindPointedObjects@CATImplementationAdapter@@UAE?AVCATListValCATBaseUnknown_var@@QBDPAVCATIBindParameters@@@Z
??0CATIGenericFactory@@QAE@XZ
catiaapplicationframe
?CloseWindowFromEditor@CATEditor@@UAEXXZ
?ResetUserSettingsValue@CATEditor@@UAEXXZ
?CommitModification@CATEditor@@UAEXPAVCATSettingRepository@@@Z
?CommitModification@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@@Z
?CancelModification@CATEditor@@UAEXPAVCATSettingRepository@@@Z
?CancelModification@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@@Z
?OKToRepaintOnCommit@CATEditor@@UAEJAAH@Z
?QueryAcceptDocument@CATEditor@@UAEHPBVCATDocument@@@Z
?GetUndoFromEditor@CATEditor@@UAEPAVCATCommandGlobalUndo@@XZ
?IID_CATIEditProperties@@3U_GUID@@A
?MetaObject@CATIEditProperties@@SGPAVCATMetaClass@@XZ
??1CATIEditProperties@@UAE@XZ
??0CATIEditProperties@@QAE@XZ
??0CATEditorFactory@@QAE@XZ
??1CATEditorFactory@@UAE@XZ
?IsAuthorized@CATEditorFactory@@QBEHPBD@Z
??0CATEditorFactory@@IAE@ABV0@@Z
??4CATEditorFactory@@IAEAAV0@ABV0@@Z
?SetUserSettingsValue@CATEditor@@UAEXPAVCATSettingRepository@@@Z
di0panv2
?RequestDelayedDestruction@CATDialog@@UAEXXZ
?Activate@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?Desactivate@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?Cancel@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?SaveState@CATDialog@@UAEHPAVCATNotification@@AAVCATMarshal@@@Z
?RestoreState@CATDialog@@UAEHPAVCATNotification@@AAVCATMarshal@@@Z
?GetLetterObject@CATDlgFrame@@UAEPAVl_CATDialog@@XZ
?ResetLetterObject@CATDlgFrame@@UAEXXZ
?GetResourceFilename@CATDialog@@UBEPADH@Z
?GetName@CATDialog@@UAEAAVCATString@@XZ
js0fm
?SetName@CATCommand@@UAEXAAVCATString@@@Z
?GetCallbackManager@CATCommand@@UAEPAVCATCallbackManager@@XZ
?AnalyseNotification@CATCommand@@UAE?AW4CATNotifPropagationMode@@PAV1@PAVCATNotification@@@Z
?SendCommandSpecificObject@CATCommand@@UAEPAXPBDPAVCATNotification@@@Z
?SetPrompt@CATCommand@@UAEXVCATString@@@Z
?GetPrompt@CATCommand@@UAE?AVCATString@@XZ
?GetStatusPrompt@CATCommand@@UAEHXZ
?BeginCommand@CATCommand@@UAEXXZ
?EndCommand@CATCommand@@UAEXXZ
?Reset@CATCommand@@UAEXXZ
?UndoCommand@CATCommand@@UAEXXZ
?LogicalDeath@CATCommand@@UAEJXZ
?GetGlobalUndo@CATCommand@@UAEPAVCATCommandGlobalUndo@@XZ
catimmchgmgmtcommon
??0CATImmPropertiesEditor@@QAE@XZ
?SetPropertyValue@CATImmPropertiesEditor@@UAEXAAVCATListValCATBaseUnknown_var@@W4ModeReadWrite@@@Z
?ExtractFromSelection@CATImmPropertiesEditor@@UAEXAAVCATListValCATBaseUnknown_var@@PBV2@@Z
?SetEditorSize@CATImmPropertiesEditor@@UAEXAAH@Z
??1CATImmPropertiesEditor@@UAE@XZ
?MetaObject@CATImmPropertiesFrame@@SGPAVCATMetaClass@@XZ
??0CATImmPropertiesFrame@@QAE@PAVCATEditorPage@@AAVCATListValCATBaseUnknown_var@@@Z
?UpdateFrame@CATImmPropertiesFrame@@UAEJAAVCATListValCATBaseUnknown_var@@@Z
?BuildFrame@CATImmPropertiesFrame@@UAEJE@Z
?BuildObjectsDisplay@CATImmPropertiesFrame@@UAEJAAVCATBaseUnknown_var@@VCATString@@@Z
?GetObjects@CATImmPropertiesFrame@@UAEJAAVCATBaseUnknown_var@@VCATString@@@Z
?ClearFrame@CATImmPropertiesFrame@@MAEXXZ
?BuildLabel@CATImmPropertiesFrame@@MAEXVCATUnicodeString@@@Z
?BuildTable@CATImmPropertiesFrame@@MAEXAAVCATListPtrCATIImmObjectDesc@@@Z
?RetrieveChildList@CATImmPropertiesFrame@@MAEJVCATBaseUnknown_var@@VCATString@@AAPAVCATListPtrCATIImmObjectDesc@@@Z
??1CATImmPropertiesFrame@@UAE@XZ
?MetaObject@CATImmPropertiesEditor@@SGPAVCATMetaClass@@XZ
msvcr80
__clean_type_info_names_internal
_unlock
__dllonexit
_onexit
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??_V@YAXPAX@Z
_lock
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
??0CATVPMNavPropertiesLinksEditorFactory@@IAE@ABV0@@Z
??0CATVPMNavPropertiesLinksEditorFactory@@QAE@XZ
??1CATVPMNavPropertiesLinksEditorFactory@@UAE@XZ
??4CATVPMNavPropertiesLinksEditorFactory@@IAEAAV0@ABV0@@Z
??_7CATVPMNavPropertiesLinksEditorFactory@@6B@
?ClassId@CATVPMNavPropertiesLinksEditorFactory@@SGABU_GUID@@XZ
?ClassName@CATVPMNavPropertiesLinksEditorFactory@@SGPBDXZ
?Create@CATVPMNavPropertiesLinksEditorFactory@@UBEPAVCATBaseUnknown@@ABVCATUnicodeString@@@Z
?CreateItself@CATVPMNavPropertiesLinksEditorFactory@@SAPAVCATBaseUnknown@@XZ
?GetMetaObject@CATVPMNavPropertiesLinksEditorFactory@@UBGPAVCATMetaClass@@XZ
?IsA@CATVPMNavPropertiesLinksEditorFactory@@UBEPBDXZ
?IsAKindOf@CATVPMNavPropertiesLinksEditorFactory@@UBEHPBD@Z
?MetaObject@CATVPMNavPropertiesLinksEditorFactory@@SGPAVCATMetaClass@@XZ
?Support@CATVPMNavPropertiesLinksEditorFactory@@UBEEABVCATUnicodeString@@@Z
?meta_object@CATVPMNavPropertiesLinksEditorFactory@@0PAVCATMetaClass@@A
CreateTIECATIEditPropertiesCATVPMNavPropertiesLinksEditor
CreateTIECATIVPMNavPropertiesLinksEditorFactoryCATVPMNavPropertiesLinksEditorFactory
DASSAULT_SYSTEMES_CAA2_INTERNAL_CATImmVPMLinksProperty
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ