G:\CXR18\BSF\intel_a\code\bin\CATEhfInterfaces.pdb
Static task
static1
Behavioral task
behavioral1
Sample
95236ffcac294b8c1e40a1a6cb9b6117_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
95236ffcac294b8c1e40a1a6cb9b6117_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
95236ffcac294b8c1e40a1a6cb9b6117_JaffaCakes118
-
Size
190KB
-
MD5
95236ffcac294b8c1e40a1a6cb9b6117
-
SHA1
358bab2e8a868e25fe4567c675986183fa2b5c04
-
SHA256
bff47b5b497b973c0df8512e93d1d0e7bceb9ad864919be3c80efb6eb42c583b
-
SHA512
ccc9aeecbb8c0a9349fb5f39e92192c682d2ec5612411bceaefa3164d3ec3381180845af695048412c7463cdd7616195dc915f01a9adcdea6a2fce8f66183494
-
SSDEEP
3072:WHqCS/p2peh7Plxexzein5DToUAVS+AwmJ67IrfkpvOW3yPb:RCSRj7PKCin7jDW2fyvBy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95236ffcac294b8c1e40a1a6cb9b6117_JaffaCakes118
Files
-
95236ffcac294b8c1e40a1a6cb9b6117_JaffaCakes118.dll windows:4 windows x86 arch:x86
0f07a3c856e56f2f4bb2cb1bab8d93c4
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
js0group
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?GetMetaObject@CATBaseUnknown@@UBGPAVCATMetaClass@@XZ
?IsA@CATBaseUnknown@@UBEPBDXZ
?IsAKindOf@CATBaseUnknown@@UBEHPBD@Z
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?IsNull@CATBaseUnknown@@UBEHXZ
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
??1CATBaseUnknown@@UAE@XZ
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
??4CATBaseUnknown@@QAEAAV0@ABV0@@Z
??3CATBaseUnknown@@SAXPAX@Z
?SetFWname@CATMetaClass@@QAEXPBD@Z
?AddDictionary@@YAPBUinfo_dic@@PBU_GUID@@0PBD11PAX12HHH1@Z
?CLSID_CATMetaClass@@3U_GUID@@B
??0CATMetaClass@@QAE@PBU_GUID@@PBDPAV0@2W4ENUMTypeOfClass@@@Z
?MetaObject@CATBaseUnknown@@SGPAVCATMetaClass@@XZ
??2CATMetaClass@@SAPAXI@Z
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
?IsA@CATMetaClass@@QBEPBDXZ
??0CATFillDictionary@@QAE@ABU_GUID@@0PAX1@Z
?SetAuth@CATMetaClass@@QAEXH@Z
?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?Release@CATBaseUnknown@@UAGKXZ
?AddRef@CATBaseUnknown@@UAGKXZ
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
??0CATBaseUnknown@@QAE@ABV0@@Z
??0CATBaseUnknown@@QAE@XZ
catapplicationframe
??4CATIWorkbenchAddin@@QAEAAV0@ABV0@@Z
??0CATIWorkbenchAddin@@QAE@ABV0@@Z
??1CATIWorkbenchAddin@@UAE@XZ
??0CATIWorkbenchAddin@@QAE@XZ
?MetaObject@CATIWorkbenchAddin@@SGPAVCATMetaClass@@XZ
msvcr80
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
??_V@YAXPAX@Z
_purecall
kernel32
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
??0CATIEhfBundleSegmentLink@@QAE@ABV0@@Z
??0CATIEhfBundleSegmentLink@@QAE@XZ
??0CATIEhfDuplicationHarness@@QAE@ABV0@@Z
??0CATIEhfDuplicationHarness@@QAE@XZ
??0CATIEhfEnvironment@@QAE@ABV0@@Z
??0CATIEhfEnvironment@@QAE@XZ
??0CATIEhfFlattenManager@@QAE@ABV0@@Z
??0CATIEhfFlattenManager@@QAE@XZ
??0CATIEhfFlatteningParameters@@QAE@ABV0@@Z
??0CATIEhfFlatteningParameters@@QAE@XZ
??0CATIEhfLengthTolerance@@QAE@ABV0@@Z
??0CATIEhfLengthTolerance@@QAE@XZ
??0CATIEhfManageLengthTolerance@@QAE@ABV0@@Z
??0CATIEhfManageLengthTolerance@@QAE@XZ
??0CATIEhfPrdWkbCfgAddin@@QAE@ABV0@@Z
??0CATIEhfPrdWkbCfgAddin@@QAE@XZ
??0CATIEhfUIPArrangeJunction@@QAE@ABV0@@Z
??0CATIEhfUIPArrangeJunction@@QAE@XZ
??0CATIEhfUIPLengthTolerance@@QAE@ABV0@@Z
??0CATIEhfUIPLengthTolerance@@QAE@XZ
??0CATIEleLengthTolerance@@QAE@ABV0@@Z
??0CATIEleLengthTolerance@@QAE@XZ
??0CATIEleManageLengthTolerance@@QAE@ABV0@@Z
??0CATIEleManageLengthTolerance@@QAE@XZ
??1CATIEhfBundleSegmentLink@@UAE@XZ
??1CATIEhfDuplicationHarness@@UAE@XZ
??1CATIEhfEnvironment@@UAE@XZ
??1CATIEhfFlattenManager@@UAE@XZ
??1CATIEhfFlatteningParameters@@UAE@XZ
??1CATIEhfLengthTolerance@@UAE@XZ
??1CATIEhfManageLengthTolerance@@UAE@XZ
??1CATIEhfPrdWkbCfgAddin@@UAE@XZ
??1CATIEhfUIPArrangeJunction@@UAE@XZ
??1CATIEhfUIPLengthTolerance@@UAE@XZ
??1CATIEleLengthTolerance@@UAE@XZ
??1CATIEleManageLengthTolerance@@UAE@XZ
??4CATIEhfBundleSegmentLink@@QAEAAV0@ABV0@@Z
??4CATIEhfDuplicationHarness@@QAEAAV0@ABV0@@Z
??4CATIEhfEnvironment@@QAEAAV0@ABV0@@Z
??4CATIEhfFlattenManager@@QAEAAV0@ABV0@@Z
??4CATIEhfFlatteningParameters@@QAEAAV0@ABV0@@Z
??4CATIEhfLengthTolerance@@QAEAAV0@ABV0@@Z
??4CATIEhfManageLengthTolerance@@QAEAAV0@ABV0@@Z
??4CATIEhfPrdWkbCfgAddin@@QAEAAV0@ABV0@@Z
??4CATIEhfUIPArrangeJunction@@QAEAAV0@ABV0@@Z
??4CATIEhfUIPLengthTolerance@@QAEAAV0@ABV0@@Z
??4CATIEleLengthTolerance@@QAEAAV0@ABV0@@Z
??4CATIEleManageLengthTolerance@@QAEAAV0@ABV0@@Z
??_7CATIEhfBundleSegmentLink@@6B@
??_7CATIEhfDuplicationHarness@@6B@
??_7CATIEhfEnvironment@@6B@
??_7CATIEhfFlattenManager@@6B@
??_7CATIEhfFlatteningParameters@@6B@
??_7CATIEhfLengthTolerance@@6B@
??_7CATIEhfManageLengthTolerance@@6B@
??_7CATIEhfPrdWkbCfgAddin@@6B@
??_7CATIEhfUIPArrangeJunction@@6B@
??_7CATIEhfUIPLengthTolerance@@6B@
??_7CATIEleLengthTolerance@@6B@
??_7CATIEleManageLengthTolerance@@6B@
?ClassId@CATIEhfBundleSegmentLink@@SGABU_GUID@@XZ
?ClassId@CATIEhfDuplicationHarness@@SGABU_GUID@@XZ
?ClassId@CATIEhfEnvironment@@SGABU_GUID@@XZ
?ClassId@CATIEhfFlattenManager@@SGABU_GUID@@XZ
?ClassId@CATIEhfFlatteningParameters@@SGABU_GUID@@XZ
?ClassId@CATIEhfLengthTolerance@@SGABU_GUID@@XZ
?ClassId@CATIEhfManageLengthTolerance@@SGABU_GUID@@XZ
?ClassId@CATIEhfPrdWkbCfgAddin@@SGABU_GUID@@XZ
?ClassId@CATIEhfUIPArrangeJunction@@SGABU_GUID@@XZ
?ClassId@CATIEhfUIPLengthTolerance@@SGABU_GUID@@XZ
?ClassId@CATIEleLengthTolerance@@SGABU_GUID@@XZ
?ClassId@CATIEleManageLengthTolerance@@SGABU_GUID@@XZ
?ClassName@CATIEhfBundleSegmentLink@@SGPBDXZ
?ClassName@CATIEhfDuplicationHarness@@SGPBDXZ
?ClassName@CATIEhfEnvironment@@SGPBDXZ
?ClassName@CATIEhfFlattenManager@@SGPBDXZ
?ClassName@CATIEhfFlatteningParameters@@SGPBDXZ
?ClassName@CATIEhfLengthTolerance@@SGPBDXZ
?ClassName@CATIEhfManageLengthTolerance@@SGPBDXZ
?ClassName@CATIEhfPrdWkbCfgAddin@@SGPBDXZ
?ClassName@CATIEhfUIPArrangeJunction@@SGPBDXZ
?ClassName@CATIEhfUIPLengthTolerance@@SGPBDXZ
?ClassName@CATIEleLengthTolerance@@SGPBDXZ
?ClassName@CATIEleManageLengthTolerance@@SGPBDXZ
?IID_CATIEhfBundleSegmentLink@@3U_GUID@@A
?IID_CATIEhfDuplicationHarness@@3U_GUID@@A
?IID_CATIEhfEnvironment@@3U_GUID@@A
?IID_CATIEhfFlattenManager@@3U_GUID@@A
?IID_CATIEhfFlatteningParameters@@3U_GUID@@A
?IID_CATIEhfLengthTolerance@@3U_GUID@@A
?IID_CATIEhfManageLengthTolerance@@3U_GUID@@A
?IID_CATIEhfPrdWkbCfgAddin@@3U_GUID@@A
?IID_CATIEhfUIPArrangeJunction@@3U_GUID@@A
?IID_CATIEhfUIPLengthTolerance@@3U_GUID@@A
?IID_CATIEleLengthTolerance@@3U_GUID@@A
?IID_CATIEleManageLengthTolerance@@3U_GUID@@A
?MetaObject@CATIEhfBundleSegmentLink@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfDuplicationHarness@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfEnvironment@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfFlattenManager@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfFlatteningParameters@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfLengthTolerance@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfManageLengthTolerance@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfPrdWkbCfgAddin@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfUIPArrangeJunction@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEhfUIPLengthTolerance@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEleLengthTolerance@@SGPAVCATMetaClass@@XZ
?MetaObject@CATIEleManageLengthTolerance@@SGPAVCATMetaClass@@XZ
?meta_object@CATIEhfBundleSegmentLink@@0PAVCATMetaClass@@A
?meta_object@CATIEhfDuplicationHarness@@0PAVCATMetaClass@@A
?meta_object@CATIEhfEnvironment@@0PAVCATMetaClass@@A
?meta_object@CATIEhfFlattenManager@@0PAVCATMetaClass@@A
?meta_object@CATIEhfFlatteningParameters@@0PAVCATMetaClass@@A
?meta_object@CATIEhfLengthTolerance@@0PAVCATMetaClass@@A
?meta_object@CATIEhfManageLengthTolerance@@0PAVCATMetaClass@@A
?meta_object@CATIEhfPrdWkbCfgAddin@@0PAVCATMetaClass@@A
?meta_object@CATIEhfUIPArrangeJunction@@0PAVCATMetaClass@@A
?meta_object@CATIEhfUIPLengthTolerance@@0PAVCATMetaClass@@A
?meta_object@CATIEleLengthTolerance@@0PAVCATMetaClass@@A
?meta_object@CATIEleManageLengthTolerance@@0PAVCATMetaClass@@A
DASSAULT_SYSTEMES_CAA2_INTERNAL_CATEhfInterfaces
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 168KB - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ