O:\OOO330\ooo\filter\wntmsci12.pro\bin\eppmi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
95d4422f446bde71405b172b6dda9fb4_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
95d4422f446bde71405b172b6dda9fb4_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
95d4422f446bde71405b172b6dda9fb4_JaffaCakes118
-
Size
20KB
-
MD5
95d4422f446bde71405b172b6dda9fb4
-
SHA1
803e17bf30b15bf859e17cdfe5541c0100cb80a1
-
SHA256
0e0421251e5ae6eedfc2e5dcc3f943bd08e8fef0e51b3c279fbbe462b5f2a297
-
SHA512
709f7fe9c44e12e4668fdd87b1f7cff196b2aa2ca5e3af57116a58dd642151c0ad921915981de38831a23dd75f9836cc0bc4eeb6f836e49e3fcc42d4f13c9fa6
-
SSDEEP
384:cQHsOcTfqj/xSJhljrFnnCp7/bBWYDOoO6jqkXW0xI:xsOcWj/xSJnjrFCllFDOQWkXXxI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 95d4422f446bde71405b172b6dda9fb4_JaffaCakes118
Files
-
95d4422f446bde71405b172b6dda9fb4_JaffaCakes118.dll windows:5 windows x86 arch:x86
d65b675755cf708a17220037db679966
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
tlmi
?SetNumberFormatInt@SvStream@@QAEXG@Z
??0ByteString@@QAE@PBD@Z
?CreateResMgr@ResMgr@@SAPAV1@PBDULocale@lang@star@sun@com@@@Z
??6SvStream@@QAEAAV0@PBD@Z
??1ByteString@@QAE@XZ
??6SvStream@@QAEAAV0@D@Z
?CreateFromInt32@ByteString@@SA?AV1@JF@Z
??1ResMgr@@QAE@XZ
??1String@@QAE@XZ
??BString@@QBE?AVOUString@rtl@@XZ
??0String@@QAE@PBDGGK@Z
??0String@@QAE@ABVResId@@@Z
?PopContext@ResMgr@@QAEXPBVResource@@@Z
??6SvStream@@QAEAAV0@E@Z
vclmi
?Invalidate@Window@@UAEXABVRegion@@G@Z
?Invalidate@Window@@UAEXABVRectangle@@G@Z
?Invalidate@Window@@UAEXG@Z
?SetText@Window@@UAEXABVString@@@Z
?GetText@Window@@UBE?AVString@@XZ
?GetDisplayText@Window@@UBE?AVString@@XZ
?GetDisplayBackground@Window@@UBEABVWallpaper@@XZ
?GetComponentInterface@Window@@UAE?AV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@E@Z
?SetComponentInterface@Window@@UAEXV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@@Z
?CreateAccessible@Window@@UAE?AV?$Reference@VXAccessible@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?Scroll@Window@@UAEXJJG@Z
?GetParentLabeledBy@Window@@UBEPAV1@PBV1@@Z
?GetDropTarget@Window@@UAE?AV?$Reference@VXDropTarget@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragSource@Window@@UAE?AV?$Reference@VXDragSource@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragGestureRecognizer@Window@@UAE?AV?$Reference@VXDragGestureRecognizer@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetClipboard@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetPrimarySelection@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetOptimalSize@Window@@UBE?AVSize@@W4WindowSizeType@@@Z
?GetSurroundingText@Window@@UBE?AVString@@XZ
?GetSurroundingTextSelection@Window@@UBE?AVSelection@@XZ
?Close@Dialog@@UAEEXZ
?TitleButtonClick@SystemWindow@@UAEXG@Z
?Pin@SystemWindow@@UAEXXZ
?Roll@SystemWindow@@UAEXXZ
?Resizing@SystemWindow@@UAEXAAVSize@@@Z
?Execute@Dialog@@UAEFXZ
?StartExecuteModal@Dialog@@UAEXABVLink@@@Z
?EndDialog@Dialog@@QAEXJ@Z
?Check@RadioButton@@QAEXE@Z
??0HelpButton@@QAE@PAVWindow@@ABVResId@@@Z
??0CancelButton@@QAE@PAVWindow@@ABVResId@@@Z
??0OKButton@@QAE@PAVWindow@@ABVResId@@@Z
??0RadioButton@@QAE@PAVWindow@@ABVResId@@@Z
??0FixedLine@@QAE@PAVWindow@@ABVResId@@@Z
??0ModalDialog@@QAE@PAVWindow@@ABVResId@@@Z
?Scroll@Window@@UAEXJJABVRectangle@@G@Z
?IsScrollable@Window@@UBEEXZ
?SetOutputSizePixel@Window@@UAEXABVSize@@@Z
?GetSizePixel@Window@@UBE?AVSize@@XZ
?SetSizePixel@Window@@UAEXABVSize@@@Z
?GetPosPixel@Window@@UBE?AVPoint@@XZ
?SetPosPixel@Window@@UAEXABVPoint@@@Z
?SetPosSizePixel@Window@@UAEXJJJJG@Z
?SetPosSizePixel@Window@@UAEXABVPoint@@ABVSize@@@Z
?SetSettings@Window@@UAEXABVAllSettings@@E@Z
?GetPreferredKeyInputWindow@Window@@UAEPAV1@XZ
?Notify@Dialog@@UAEJAAVNotifyEvent@@@Z
?PreNotify@SystemWindow@@UAEJAAVNotifyEvent@@@Z
?DataChanged@Dialog@@UAEXABVDataChangedEvent@@@Z
?StateChanged@Dialog@@UAEXG@Z
?UserEvent@Window@@UAEXKPAX@Z
?Tracking@Window@@UAEXABVTrackingEvent@@@Z
?Command@Window@@UAEXABVCommandEvent@@@Z
?RequestHelp@Window@@UAEXABVHelpEvent@@@Z
?LoseFocus@Window@@UAEXXZ
?GetFocus@Window@@UAEXXZ
?Deactivate@Window@@UAEXXZ
?Activate@Window@@UAEXXZ
?Resize@Window@@UAEXXZ
?Move@Window@@UAEXXZ
?Draw@Dialog@@MAEXPAVOutputDevice@@ABVPoint@@ABVSize@@K@Z
?Paint@Window@@UAEXABVRectangle@@@Z
?PrePaint@Window@@UAEXXZ
?KeyUp@Window@@UAEXABVKeyEvent@@@Z
?KeyInput@Window@@UAEXABVKeyEvent@@@Z
?MouseButtonUp@Window@@UAEXABVMouseEvent@@@Z
?MouseButtonDown@Window@@UAEXABVMouseEvent@@@Z
?MouseMove@Window@@UAEXABVMouseEvent@@@Z
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetSettings@Window@@UAEXABVAllSettings@@@Z
??1PushButton@@UAE@XZ
??1RadioButton@@UAE@XZ
??1Control@@UAE@XZ
??1Dialog@@UAE@XZ
??0GraphicConversionParameters@@QAE@ABVSize@@_N11@Z
?GetBitmapEx@Graphic@@QBE?AVBitmapEx@@ABVGraphicConversionParameters@@@Z
?GetBitmap@BitmapEx@@QBE?AVBitmap@@PBVColor@@@Z
?Convert@Bitmap@@QAEEW4BmpConversion@@@Z
?AcquireReadAccess@Bitmap@@QAEPAVBitmapReadAccess@@XZ
?ReleaseAccess@Bitmap@@QAEXPAVBitmapReadAccess@@@Z
??1Bitmap@@QAE@XZ
??1BitmapEx@@QAE@XZ
?GetSettings@Application@@SAABVAllSettings@@XZ
?GetUILocale@AllSettings@@QBEABULocale@lang@star@sun@com@@XZ
?GetPixel@BitmapReadAccess@@QBE?AVBitmapColor@@JJ@Z
?GetParentLabelFor@Window@@UBEPAV1@PBV1@@Z
cppu3
typelib_static_sequence_type_init
uno_type_destructData
uno_type_sequence_assign
typelib_static_type_init
svtmi
??0FilterConfigItem@@QAE@ABVOUString@rtl@@PAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?ReadInt32@FilterConfigItem@@QAEJABVOUString@rtl@@J@Z
??1FilterConfigItem@@QAE@XZ
?GetFilterData@FilterConfigItem@@QBE?AV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@XZ
?WriteInt32@FilterConfigItem@@QAEXABVOUString@rtl@@J@Z
?GetStatusIndicator@FilterConfigItem@@QBE?AV?$Reference@VXStatusIndicator@task@star@sun@com@@@uno@star@sun@com@@XZ
sal3
rtl_uString_new
rtl_uString_acquire
rtl_uString_release
msvcr90
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
??3@YAXPAX@Z
__clean_type_info_names_internal
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
kernel32
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedExchange
Exports
Exports
DoExportDialog
GetVersionInfo
GraphicExport
Sections
.text Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ