G:\CXR19\BSF\intel_a\code\bin\CATDMU2DSettings.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d54c11bba1c81a43d310d6c1256973da_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
d54c11bba1c81a43d310d6c1256973da_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d54c11bba1c81a43d310d6c1256973da_JaffaCakes118
-
Size
32KB
-
MD5
d54c11bba1c81a43d310d6c1256973da
-
SHA1
1f1c50960320845d3cfcda716f9872131d91a424
-
SHA256
66394828e246b3b86a2d635aac282174810e43c2627c84062446a9e740c2d719
-
SHA512
1dadc7a4c97da21b81ebaa607e55add94680dcb1b19d29b14042059ae29cbaefc8c9281cca86f453df6823f14a685df26699abea9199ca1d0ae12112a97db876
-
SSDEEP
384:to7OE2Vhigsj+RWqSm4oWdc5G+tRW46SzKdJcu4OU/24v24WVGYVHcX6HtGXz1fb:tXE6QeW0GqQ4tSJc7OA2Q25V144Gyuc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d54c11bba1c81a43d310d6c1256973da_JaffaCakes118
Files
-
d54c11bba1c81a43d310d6c1256973da_JaffaCakes118.dll windows:4 windows x86 arch:x86
7e54dba875526c9a68ce6ba60d63302f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
catobjectmodelerbase
?ExternalBindPointedObjects@CATExtensionAdapter@@UAE?AVCATListValCATBaseUnknown_var@@QBDPAVCATIBindParameters@@@Z
?GetStoredName@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@ABVCATUnicodeString@@@Z
?FillArea@CATExtensionAdapter@@UAEXABVCATUnicodeString@@V_SEQUENCE_octet@@E@Z
?IsAFilledArea@CATExtensionAdapter@@UAEEABVCATUnicodeString@@@Z
?ListSupportedAreasIdentifier@CATExtensionAdapter@@UAEXPAVCATListValCATUnicodeString@@AAE@Z
?GetAdditionalInfos@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetLocatorType@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetDocument@CATExtensionAdapter@@UAEPAVCATDocument@@XZ
?GetIdentifier@CATExtensionAdapter@@UAEXAAV_SEQUENCE_octet@@AAE@Z
?GetSymbolicLink@CATExtensionAdapter@@UAEPAVCATISymbolicLink@@XZ
?GetName_B@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@W4CATNameKind@@@Z
?GetName@CATExtensionAdapter@@UAEPADW4CATNameKind@@@Z
?GetInverseLinks@CATExtensionAdapter@@UAE?AVCATListValCATBaseUnknown_var@@XZ
?RemoveInverseLink@CATExtensionAdapter@@UAEXVCATBaseUnknown_var@@@Z
?AddInverseLink@CATExtensionAdapter@@UAEXVCATBaseUnknown_var@@@Z
?GetCallbackManager@CATExtensionAdapter@@UAEPAVCATCallbackManager@@XZ
?RemoveInterfaceSubscriptions@CATExtensionAdapter@@UAEXPAVCATInterfaceEvents@@PAD@Z
?RemoveSubscriptionsOn@CATExtensionAdapter@@UAEXPAVCATInterfaceEvents@@PBDPADPAX@Z
?AddSubscription@CATExtensionAdapter@@UAEJPAVCATInterfaceEvents@@PBDP8CATBaseUnknown@@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?MetaObject@CATExtensionAdapter@@SGPAVCATMetaClass@@XZ
??1CATIGenericFactory@@UAE@XZ
??0CATIGenericFactory@@QAE@XZ
?ExternalBindPointedObjects@CATImplementationAdapter@@UAE?AVCATListValCATBaseUnknown_var@@QBDPAVCATIBindParameters@@@Z
?GetStoredName@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@ABVCATUnicodeString@@@Z
?FillArea@CATImplementationAdapter@@UAEXABVCATUnicodeString@@V_SEQUENCE_octet@@E@Z
?IsAFilledArea@CATImplementationAdapter@@UAEEABVCATUnicodeString@@@Z
?ListSupportedAreasIdentifier@CATImplementationAdapter@@UAEXPAVCATListValCATUnicodeString@@AAE@Z
?GetAdditionalInfos@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetLocatorType@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetDocument@CATImplementationAdapter@@UAEPAVCATDocument@@XZ
?GetIdentifier@CATImplementationAdapter@@UAEXAAV_SEQUENCE_octet@@AAE@Z
?GetSymbolicLink@CATImplementationAdapter@@UAEPAVCATISymbolicLink@@XZ
?GetName_B@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@W4CATNameKind@@@Z
?GetName@CATImplementationAdapter@@UAEPADW4CATNameKind@@@Z
?GetInverseLinks@CATImplementationAdapter@@UAE?AVCATListValCATBaseUnknown_var@@XZ
?RemoveInverseLink@CATImplementationAdapter@@UAEXVCATBaseUnknown_var@@@Z
?MetaObject@CATIGenericFactory@@SGPAVCATMetaClass@@XZ
?AddInverseLink@CATImplementationAdapter@@UAEXVCATBaseUnknown_var@@@Z
js0group
?fct_FindMetaObject@@YAPAVCATMetaClass@@PBD@Z
?SetExtensionOf@CATMetaClass@@QAGXPAV1@@Z
??0CATFillDictionary@@QAE@PBVCATMetaClass@@0PAX1H@Z
?Tie_Link@@YAPAUIUnknown@@PAVCATBaseUnknown@@0ABU_GUID@@@Z
?Tie_Construct@@YAPAVCATBaseUnknown@@PAUIUnknown@@PAVCATMetaClass@@PAPAV1@HPAV1@ABU_GUID@@W4ENUMTypeOfClass@@3P6APAV1@XZ32@Z
??3CATBaseUnknown@@SAXPAX@Z
?IsAKindOf@CATMetaClass@@QBEHPBD@Z
?IsA@CATMetaClass@@QBEPBDXZ
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
?Tie_Release@@YAKPAHPAPAVCATBaseUnknown@@PAV1@W4ENUMTypeOfClass@@PAJ@Z
??1CATUnicodeString@@QAE@XZ
?Tie_Query@@YAJPAUIUnknown@@PAVCATBaseUnknown@@1PAVCATMetaClass@@HABU_GUID@@PAPAX@Z
?IsAKindOf@CATBaseUnknown@@UBEHPBD@Z
?IsA@CATBaseUnknown@@UBEPBDXZ
?GetTypeOfClass@CATMetaClass@@QBG?AW4ENUMTypeOfClass@@XZ
?Tie_Destruct@@YAXPAUIUnknown@@PAPAVCATBaseUnknown@@W4ENUMTypeOfClass@@J@Z
??2CATMetaClass@@SAPAXI@Z
??0CATMetaClass@@QAE@PBU_GUID@@PBDPAV0@2W4ENUMTypeOfClass@@@Z
?Rollback@CATSettingRepository@@QAEJXZ
?SaveRepository@CATSettingRepository@@QAEJPBD@Z
?ResetToAdminValues@CATSettingRepository@@QAEJXZ
??2CATBaseUnknown@@SAPAXI@Z
??8CATUnicodeString@@QBEHABV0@@Z
??0CATUnicodeString@@QAE@QBD@Z
??BCATUnicodeString@@QBEPBDXZ
??1CATSettingInfo@@UAE@XZ
??0CATSettingInfo@@QAE@XZ
?WriteSetting@CATSettingRepository@@QAEJPBDPAHJH@Z
?WriteSetting@CATSettingRepository@@QAEJPBDPAIJH@Z
?GetInfo@CATSettingRepository@@QAEJPBDPAVCATSettingInfo@@H@Z
?SetFWname@CATMetaClass@@QAEXPBD@Z
?AddDictionary@@YAPBUinfo_dic@@PBU_GUID@@0PBD11PAX12HHH1@Z
?CLSID_CATMetaClass@@3U_GUID@@B
?CastTo@CATBaseUnknown_var@@IAGXPAUIUnknown@@ABU_GUID@@@Z
??0CATFillDictionary@@QAE@ABU_GUID@@0PAX1@Z
?Tie_AddRef@@YAKPAVCATBaseUnknown@@W4ENUMTypeOfClass@@PAJ@Z
??0CATString@@QAE@QBD@Z
??1CATString@@QAE@XZ
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PAD@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@ABU_GUID@@@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPADPAX@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDABU_GUID@@PAX@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZABU_GUID@@2@Z
?GetCallbackManager@CATEventSubscriber@@UAEPAVCATCallbackManager@@XZ
?RemoveSubscriberCallbacks@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@@Z
?RemoveCallbacksOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPAX@Z
?RemoveCallback@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@J@Z
?AddCallback@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@Z2@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?IsNull@CATBaseUnknown@@UBEHXZ
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?Release@CATBaseUnknown@@UAGKXZ
?AddRef@CATBaseUnknown@@UAGKXZ
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?GetRepository@CATSettingRepository@@SAPAV1@PBDHW4AccessType@1@PAVCATISysSettingController@@@Z
?ReadSetting@CATSettingRepository@@QAEJPBDPAIJ@Z
?ReadSetting@CATSettingRepository@@QAEJPBDPAHJ@Z
?Commit@CATSettingRepository@@QAEJH@Z
?fct_RetrieveMetaObject@@YAPAVCATMetaClass@@PBDW4ENUMTypeOfClass@@PAV1@00J@Z
?Run@Tie_StackCtx@@QAEPAVCATBaseUnknown@@PAV2@0@Z
?Tie_Invoke@@YAJPAUIDispatch@@PAVCATMetaClass@@JABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Tie_GetIDsOfNames@@YAJPAUIDispatch@@PAVCATMetaClass@@ABU_GUID@@PAPAGIKPAJ@Z
?Tie_GetTypeInfo@@YAJPAUIDispatch@@PAVCATMetaClass@@IKPAPAUITypeInfo@@@Z
?Tie_GetTypeInfoCount@@YAJPAUIDispatch@@PAVCATMetaClass@@PAI@Z
di0panv2
??1CATDlgLock@@UAE@XZ
??1CATDlgCheckButton@@UAE@XZ
??1CATDlgLabel@@UAE@XZ
?IsAKindOf@CATDlgLock@@UBEHPBD@Z
?IsA@CATDlgLock@@UBEPBDXZ
?GetMetaObject@CATDlgLock@@UBGPAVCATMetaClass@@XZ
?ResetLetterObject@CATDlgCheckButton@@UAEXXZ
?GetLetterObject@CATDlgCheckButton@@UAEPAVl_CATDialog@@XZ
?IsAKindOf@CATDlgCheckButton@@UBEHPBD@Z
?IsA@CATDlgCheckButton@@UBEPBDXZ
?GetMetaObject@CATDlgCheckButton@@UBGPAVCATMetaClass@@XZ
?ResetLetterObject@CATDlgLabel@@UAEXXZ
?GetLetterObject@CATDlgLabel@@UAEPAVl_CATDialog@@XZ
?IsAKindOf@CATDlgLabel@@UBEHPBD@Z
?IsA@CATDlgLabel@@UBEPBDXZ
?GetMetaObject@CATDlgLabel@@UBGPAVCATMetaClass@@XZ
?SetGridConstraints@CATDialog@@QAEXFFFFI@Z
??0CATDlgLabel@@QAE@PAVCATDialog@@ABVCATString@@K@Z
??0CATDlgCheckButton@@QAE@PAVCATDialog@@ABVCATString@@K@Z
??0CATDlgLock@@QAE@PAVCATDialog@@ABVCATString@@PBVCATSettingInfo@@HK@Z
?AddAssociatedDialog@CATDlgLock@@QAEXPAVCATDialog@@@Z
?GetComboSelectNotification@CATDlgCombo@@QBEPAVCATNotification@@XZ
?GetChkBModifyNotification@CATDlgCheckButton@@QBEPAVCATNotification@@XZ
?SetVisibility@CATDialog@@QAEXK@Z
?GetState@CATDlgCheckButton@@QAEKXZ
?SetState@CATDlgCheckButton@@QAEXKH@Z
??1CATDlgFrame@@UAE@XZ
?GetResourceFilename@CATDialog@@UBEPADH@Z
?ResetLetterObject@CATDlgFrame@@UAEXXZ
?GetLetterObject@CATDlgFrame@@UAEPAVl_CATDialog@@XZ
?RestoreState@CATDialog@@UAEHPAVCATNotification@@AAVCATMarshal@@@Z
?SaveState@CATDialog@@UAEHPAVCATNotification@@AAVCATMarshal@@@Z
?Cancel@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?Desactivate@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?Activate@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?GetName@CATDialog@@UAEAAVCATString@@XZ
?RequestDelayedDestruction@CATDialog@@UAEXXZ
??0CATDlgFrame@@QAE@PAVCATDialog@@ABVCATString@@K@Z
?GetMetaObject@CATDlgFrame@@UBGPAVCATMetaClass@@XZ
?IsA@CATDlgFrame@@UBEPBDXZ
?IsAKindOf@CATDlgFrame@@UBEHPBD@Z
js0fm
?GetGlobalUndo@CATCommand@@UAEPAVCATCommandGlobalUndo@@XZ
?UndoCommand@CATCommand@@UAEXXZ
?Reset@CATCommand@@UAEXXZ
?EndCommand@CATCommand@@UAEXXZ
?BeginCommand@CATCommand@@UAEXXZ
?GetStatusPrompt@CATCommand@@UAEHXZ
?GetPrompt@CATCommand@@UAE?AVCATString@@XZ
?SetPrompt@CATCommand@@UAEXVCATString@@@Z
?SendCommandSpecificObject@CATCommand@@UAEPAXPBDPAVCATNotification@@@Z
?AnalyseNotification@CATCommand@@UAE?AW4CATNotifPropagationMode@@PAV1@PAVCATNotification@@@Z
?SetName@CATCommand@@UAEXAAVCATString@@@Z
?LogicalDeath@CATCommand@@UAEJXZ
?GetCallbackManager@CATCommand@@UAEPAVCATCallbackManager@@XZ
?AddAnalyseNotificationCB@CATCommand@@IAEJPAV1@PAVCATNotification@@P8CATBaseUnknown@@AEX01PAX@Z2@Z
catiaapplicationframe
?QueryAcceptDocument@CATEditor@@UAEHPBVCATDocument@@@Z
?SetEditorSize@CATEditor@@UAEXAAH@Z
?GetUndoFromEditor@CATEditor@@UAEPAVCATCommandGlobalUndo@@XZ
??1CATEditor@@UAE@XZ
?IID_CATIUserSettings@@3U_GUID@@A
?MetaObject@CATIUserSettings@@SGPAVCATMetaClass@@XZ
??1CATIUserSettings@@UAE@XZ
??0CATIUserSettings@@QAE@XZ
??0CATEditorFactory@@QAE@XZ
?ExtractFromSelection@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@PBV2@@Z
?IsAuthorized@CATEditorFactory@@QBEHPBD@Z
??0CATEditorFactory@@IAE@ABV0@@Z
??4CATEditorFactory@@IAEAAV0@ABV0@@Z
?SetSelectedColor@CATComboColor@@QAEXIII@Z
?GetSelectedColor@CATComboColor@@QAEHPAI00@Z
?GetCombo@CATComboColor@@QAEPAVCATDlgCombo@@XZ
??0CATComboColor@@QAE@PAVCATDialog@@ABVCATString@@KIIIHII@Z
??1CATComboColor@@UAE@XZ
?OKToRepaintOnCommit@CATEditor@@UAEJAAH@Z
?CancelModification@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@@Z
?CommitModification@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@@Z
?SetPropertyValue@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@W4ModeReadWrite@@@Z
?GetEditorTitle@CATEditor@@UAE?AVCATUnicodeString@@XZ
?CloseWindowFromEditor@CATEditor@@UAEXXZ
??1CATEditorFactory@@UAE@XZ
?MetaObject@CATEditor@@SGPAVCATMetaClass@@XZ
??0CATEditor@@QAE@XZ
catdlgstandard
?SetSensitivity@CATDlgToolsOptionsFrame@@UAEXABK@Z
?GetOptionsFrame@CATDlgToolsOptionsFrame@@UAEPAVCATDlgFrame@@XZ
?IsAKindOf@CATDlgToolsOptionsFrame@@UBEHPBD@Z
?IsA@CATDlgToolsOptionsFrame@@UBEPBDXZ
?GetMetaObject@CATDlgToolsOptionsFrame@@UBGPAVCATMetaClass@@XZ
??0CATDlgToolsOptionsFrame@@QAE@PAVCATDialog@@ABVCATString@@1K@Z
??1CATDlgToolsOptionsFrame@@UAE@XZ
msvcr80
__clean_type_info_names_internal
_unlock
__CppXcptFilter
_lock
_onexit
_except_handler4_common
_crt_debugger_hook
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??3@YAXPAX@Z
??_V@YAXPAX@Z
_callnewh
__dllonexit
malloc
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
??0CATDMU2DSettingsEditorFactory@@IAE@ABV0@@Z
??0CATDMU2DSettingsEditorFactory@@QAE@XZ
??1CATDMU2DSettingsEditorFactory@@UAE@XZ
??4CATDMU2DSettingsEditorFactory@@IAEAAV0@ABV0@@Z
??_7CATDMU2DSettingsEditorFactory@@6B@
?ClassId@CATDMU2DSettingsEditorFactory@@SGABU_GUID@@XZ
?ClassName@CATDMU2DSettingsEditorFactory@@SGPBDXZ
?Create@CATDMU2DSettingsEditorFactory@@UBEPAVCATBaseUnknown@@ABVCATUnicodeString@@@Z
?CreateItself@CATDMU2DSettingsEditorFactory@@SAPAVCATBaseUnknown@@XZ
?GetMetaObject@CATDMU2DSettingsEditorFactory@@UBGPAVCATMetaClass@@XZ
?IID_CATIDMU2DSettingsEditorFactory@@3U_GUID@@A
?IsA@CATDMU2DSettingsEditorFactory@@UBEPBDXZ
?IsAKindOf@CATDMU2DSettingsEditorFactory@@UBEHPBD@Z
?MetaObject@CATDMU2DSettingsEditorFactory@@SGPAVCATMetaClass@@XZ
?Support@CATDMU2DSettingsEditorFactory@@UBEEABVCATUnicodeString@@@Z
?__CastTo@CATIDMU2DSettingsEditorFactory_var@@AAGXPAUIUnknown@@@Z
?meta_object@CATDMU2DSettingsEditorFactory@@0PAVCATMetaClass@@A
CreateTIECATIDMU2DSettingsEditorFactoryCATDMU2DSettingsEditorFactory
CreateTIECATIUserSettingsCATDMU2DSettingsEditor
DASSAULT_SYSTEMES_CAA2_INTERNAL_CATDMU2DSettings
Sections
.text Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 916B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ