G:\CXR18\BSF\intel_a\code\bin\CATHumanPackagingAuto.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d343388a76d35529aa5b3db0161a55eb_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
d343388a76d35529aa5b3db0161a55eb_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
d343388a76d35529aa5b3db0161a55eb_JaffaCakes118
-
Size
186KB
-
MD5
d343388a76d35529aa5b3db0161a55eb
-
SHA1
fbb54dd351faadaef2efaf9b229026ac1537139d
-
SHA256
784c1d3916ba810ed84ed461fc7f4cae42b54ebfbe3170374b9ee2f35c5a14be
-
SHA512
7094b53badd3541ff8b2192c1802f9edf52eb96365789964eb9f1523001e38419dd936fc3e91530af51b6cb85a3b9ea22cd90cc99926a0f069de42ee8117fc03
-
SSDEEP
3072:d5nCAnB33gmwRKcGtdTLnurVeGyx7NyyUDMbMgJEQuIpIdcjJO3wgm0bSgLWlR4Y:d5nCAnBngmomeFADUDz1QuIYkJ4m076/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d343388a76d35529aa5b3db0161a55eb_JaffaCakes118
Files
-
d343388a76d35529aa5b3db0161a55eb_JaffaCakes118.dll windows:4 windows x86 arch:x86
f9c02642d8eeaf365e8b58433885f060
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
js0group
?GetTypeOfClass@CATMetaClass@@QBG?AW4ENUMTypeOfClass@@XZ
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?IsA@CATBaseDispatch@@UBEPBDXZ
?IsAKindOf@CATBaseDispatch@@UBEHPBD@Z
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?IsNull@CATBaseUnknown@@UBEHXZ
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
?Tie_Query@@YAJPAUIUnknown@@PAVCATBaseUnknown@@1PAVCATMetaClass@@HABU_GUID@@PAPAX@Z
?Tie_AddRef@@YAKPAVCATBaseUnknown@@W4ENUMTypeOfClass@@PAJ@Z
?Tie_Release@@YAKPAHPAPAVCATBaseUnknown@@PAV1@W4ENUMTypeOfClass@@PAJ@Z
?Tie_GetTypeInfoCount@@YAJPAUIDispatch@@PAVCATMetaClass@@PAI@Z
?Tie_GetTypeInfo@@YAJPAUIDispatch@@PAVCATMetaClass@@IKPAPAUITypeInfo@@@Z
?Tie_GetIDsOfNames@@YAJPAUIDispatch@@PAVCATMetaClass@@ABU_GUID@@PAPAGIKPAJ@Z
?Tie_Invoke@@YAJPAUIDispatch@@PAVCATMetaClass@@JABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
ExitAfterCall
?Run@Tie_StackCtx@@QAEPAVCATBaseUnknown@@PAV2@0@Z
ExitBeforeCall
??0CATSysAutoSettingController@@IAE@XZ
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?AddRef@CATBaseUnknown@@UAGKXZ
?Release@CATBaseUnknown@@UAGKXZ
?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?Tie_Destruct@@YAXPAUIUnknown@@PAPAVCATBaseUnknown@@W4ENUMTypeOfClass@@J@Z
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?ChangeComponentState@CATBaseObject@@UAEJW4ComponentState@CATBaseUnknown@@0PBVCATSysChangeComponentStateContext@@@Z
?get_Application@CATBaseObject@@UAEJAAPAVCATIAApplication@@@Z
?get_Parent@CATBaseObject@@UAGJAAPAVCATBaseDispatch@@@Z
?get_Name@CATBaseObject@@UAEJAAPAG@Z
?put_Name@CATBaseObject@@UAEJABQAG@Z
?SetName@CATBaseObject@@UAEJABVCATUnicodeString@@@Z
?GetItem@CATBaseObject@@UAEJABQAGAAPAVCATBaseDispatch@@@Z
?Commit@CATSysAutoSettingController@@UAEJXZ
?Rollback@CATSysAutoSettingController@@UAEJXZ
?ResetToAdminValues@CATSysAutoSettingController@@UAEJXZ
?ResetToAdminValuesByName@CATSysAutoSettingController@@UAEJABUtagSAFEARRAY@@@Z
?SaveRepository@CATSysAutoSettingController@@UAEJXZ
?Initialize@CATSysAutoSettingController@@MAEJXZ
??1CATSysAutoSettingController@@UAE@XZ
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
?IsA@CATMetaClass@@QBEPBDXZ
?IsAKindOf@CATMetaClass@@QBEHPBD@Z
??2CATBaseUnknown@@SAPAXI@Z
?Tie_Construct@@YAPAVCATBaseUnknown@@PAUIUnknown@@PAVCATMetaClass@@PAPAV1@HPAV1@ABU_GUID@@W4ENUMTypeOfClass@@3P6APAV1@XZ32@Z
??3CATBaseUnknown@@SAXPAX@Z
?Tie_Link@@YAPAUIUnknown@@PAVCATBaseUnknown@@0ABU_GUID@@@Z
??0CATFillDictionary@@QAE@PBVCATMetaClass@@0PAX1H@Z
??2CATMetaClass@@SAPAXI@Z
??0CATMetaClass@@QAE@PBU_GUID@@PBDPAV0@2W4ENUMTypeOfClass@@@Z
?MetaObject@CATBaseUnknown@@SGPAVCATMetaClass@@XZ
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
?fct_RetrieveMetaObject@@YAPAVCATMetaClass@@PBDW4ENUMTypeOfClass@@PAV1@00J@Z
cathumanpackagingitf
??1CATIAVOASettingAtt@@UAE@XZ
?MetaObject@CATIAVOASettingAtt@@SGPAVCATMetaClass@@XZ
?IID_CATIAVOASettingAtt@@3U_GUID@@A
??0CATIAVOASettingAtt@@QAE@XZ
msvcr80
__dllonexit
_lock
_unlock
_except_handler4_common
_crt_debugger_hook
__clean_type_info_names_internal
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
_onexit
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
CreateTIECATIAVOASettingAttCATHBRVOAAutoSettingCtrl
DASSAULT_SYSTEMES_CAA2_INTERNAL_CATHumanPackagingAuto
Sections
.text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 912B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ