o:\OOO320\src\redland\wntmsci12.pro\bin\rasqal.pdb
Static task
static1
Behavioral task
behavioral1
Sample
da63b8de3d8899c9e36ddbd3ec8cf8b5_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
da63b8de3d8899c9e36ddbd3ec8cf8b5_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
da63b8de3d8899c9e36ddbd3ec8cf8b5_JaffaCakes118
-
Size
303KB
-
MD5
da63b8de3d8899c9e36ddbd3ec8cf8b5
-
SHA1
d493380760de6dc90e7322914328737339f847ac
-
SHA256
f9918abc66aa54e1009c7a92d1d5707f9f67f56c017b0bb8a18db1b42d320d3d
-
SHA512
6cabc1218fe7c429c40973c32b743e7c277cec2ea5fd999bb8694044a5120ab7cd45fe0e9feca8946d7ed333fc7825f528c95434fdb13fc72f09808bce811a08
-
SSDEEP
6144:XAO0xGhWBWKnHHn6d/ed0SRdATt3XMoDEnEU:Q2oWKne/e2G6ZnDkl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource da63b8de3d8899c9e36ddbd3ec8cf8b5_JaffaCakes118
Files
-
da63b8de3d8899c9e36ddbd3ec8cf8b5_JaffaCakes118.dll windows:5 windows x86 arch:x86
3ab0e8e8c67a4f3647f14f577a2fd280
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
raptor
raptor_free_namespace
raptor_xml_writer_cdata
raptor_xml_writer_cdata_counted
raptor_new_qname
raptor_xml_writer_raw
raptor_xml_writer_end_element
raptor_free_xml_element
raptor_xml_writer_empty_element
raptor_xml_element_set_attributes
raptor_new_qname_from_namespace_local_name
raptor_alloc_memory
raptor_xml_writer_raw_counted
raptor_xml_writer_start_element
raptor_new_xml_element_from_namespace_local_name
raptor_new_namespace
raptor_new_xml_writer
raptor_xml_element_get_language
raptor_qname_get_value
raptor_qname_get_counted_value
raptor_xml_element_get_attributes
raptor_free_xml_writer
raptor_qname_get_local_name
raptor_xml_element_get_name
raptor_sax2_parse_start
raptor_free_sax2
raptor_sax2_parse_chunk
raptor_iostream_read_bytes
raptor_iostream_read_eof
raptor_sax2_set_end_element_handler
raptor_sax2_set_characters_handler
raptor_sax2_set_start_element_handler
raptor_new_sax2
raptor_error_handlers_init
raptor_xmlschema_datatypes_namespace_uri
raptor_xml_name_check
raptor_new_uri_relative_to_base
raptor_owl_namespace_uri
raptor_rdf_schema_namespace_uri
raptor_sequence_print_uri
raptor_sequence_shift
raptor_namespaces_find_namespace
raptor_new_parser
raptor_set_statement_handler
raptor_set_error_handler
raptor_set_generate_id_handler
raptor_parse_uri
raptor_free_parser
raptor_format_locator
raptor_xml_literal_datatype_uri_string
raptor_rdf_namespace_uri_len
raptor_uri_filename_to_uri_string
raptor_new_iostream_to_string
raptor_free_iostream
raptor_new_uri_for_rdf_concept
raptor_uri_get_handler
raptor_new_namespaces
raptor_new_namespace_from_uri
raptor_namespaces_start_namespace
raptor_iostream_write_uri
raptor_iostream_write_bytes
raptor_iostream_write_decimal
raptor_namespaces_qname_from_uri
raptor_qname_get_namespace
raptor_namespace_get_prefix
raptor_iostream_write_qname
raptor_free_qname
raptor_uri_to_relative_counted_uri_string
raptor_uri_as_counted_string
raptor_iostream_write_string_ntriples
raptor_free_memory
raptor_iostream_write_counted_string
raptor_iostream_write_byte
raptor_iostream_write_string
raptor_namespaces_end_for_depth
raptor_namespaces_start_namespace_full
raptor_free_namespaces
raptor_qname_string_to_uri
raptor_uri_compare
raptor_uri_equals
raptor_print_ntriples_string
raptor_init
raptor_rdf_namespace_uri
raptor_finish
raptor_utf8_to_unicode_char
raptor_unicode_char_to_utf8
raptor_vsnprintf
raptor_print_locator
raptor_new_uri
raptor_uri_print
raptor_new_uri_from_uri_local_name
raptor_sequence_print
raptor_uri_as_string
raptor_free_uri
raptor_uri_copy
raptor_sequence_unshift
raptor_sequence_join
raptor_free_sequence
raptor_sequence_set_at
raptor_sequence_sort
raptor_sequence_pop
raptor_new_sequence
raptor_sequence_push
raptor_sequence_size
raptor_xml_element_get_attributes_count
raptor_sequence_get_at
msvcr90
_except_handler4_common
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
_errno
realloc
printf
isalpha
memmove
isdigit
atoi
_stricmp
_isnan
strtol
sprintf
sscanf
strrchr
vfprintf
strncmp
memcpy
tolower
abort
fputc
fputs
memset
calloc
__iob_func
fprintf
fwrite
strchr
strtod
strncpy
strtoul
_snprintf
malloc
free
_onexit
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Exports
Exports
GetVersionInfo
rasqal_alloc_memory
rasqal_calloc_memory
rasqal_copyright_string
rasqal_data_graph_print
rasqal_expression_evaluate
rasqal_expression_print
rasqal_expression_print_op
rasqal_expression_visit
rasqal_feature_from_uri
rasqal_feature_value_type
rasqal_features_enumerate
rasqal_free_data_graph
rasqal_free_expression
rasqal_free_literal
rasqal_free_memory
rasqal_free_prefix
rasqal_free_query
rasqal_free_query_results
rasqal_free_query_results_formatter
rasqal_free_triple
rasqal_free_variable
rasqal_free_world
rasqal_free_xsd_decimal
rasqal_get_feature_count
rasqal_graph_pattern_add_constraint
rasqal_graph_pattern_add_sub_graph_pattern
rasqal_graph_pattern_get_constraint
rasqal_graph_pattern_get_constraint_sequence
rasqal_graph_pattern_get_index
rasqal_graph_pattern_get_operator
rasqal_graph_pattern_get_sub_graph_pattern
rasqal_graph_pattern_get_sub_graph_pattern_sequence
rasqal_graph_pattern_get_triple
rasqal_graph_pattern_operator_as_string
rasqal_graph_pattern_print
rasqal_graph_pattern_visit
rasqal_home_url_string
rasqal_language_name_check
rasqal_languages_enumerate
rasqal_license_string
rasqal_literal_as_node
rasqal_literal_as_string
rasqal_literal_as_string_flags
rasqal_literal_as_variable
rasqal_literal_compare
rasqal_literal_datatype
rasqal_literal_equals
rasqal_literal_print
rasqal_literal_print_type
rasqal_literal_value
rasqal_new_0op_expression
rasqal_new_1op_expression
rasqal_new_2op_expression
rasqal_new_3op_expression
rasqal_new_boolean_literal
rasqal_new_cast_expression
rasqal_new_data_graph
rasqal_new_decimal_literal
rasqal_new_decimal_literal_from_decimal
rasqal_new_double_literal
rasqal_new_expression_from_expression
rasqal_new_float_literal
rasqal_new_function_expression
rasqal_new_integer_literal
rasqal_new_literal_expression
rasqal_new_literal_from_literal
rasqal_new_pattern_literal
rasqal_new_prefix
rasqal_new_query
rasqal_new_query_results_formatter
rasqal_new_query_results_formatter_by_mime_type
rasqal_new_simple_literal
rasqal_new_string_literal
rasqal_new_string_op_expression
rasqal_new_triple
rasqal_new_triple_from_triple
rasqal_new_typed_literal
rasqal_new_uri_literal
rasqal_new_variable
rasqal_new_variable_from_variable
rasqal_new_variable_literal
rasqal_new_variable_typed
rasqal_new_world
rasqal_new_xsd_decimal
rasqal_prefix_print
rasqal_query_add_data_graph
rasqal_query_add_prefix
rasqal_query_add_variable
rasqal_query_escape_counted_string
rasqal_query_execute
rasqal_query_get_all_variable_sequence
rasqal_query_get_anonymous_variable_sequence
rasqal_query_get_bound_variable_sequence
rasqal_query_get_construct_triple
rasqal_query_get_construct_triples_sequence
rasqal_query_get_data_graph
rasqal_query_get_data_graph_sequence
rasqal_query_get_distinct
rasqal_query_get_explain
rasqal_query_get_feature
rasqal_query_get_feature_string
rasqal_query_get_graph_pattern
rasqal_query_get_graph_pattern_sequence
rasqal_query_get_group_condition
rasqal_query_get_group_conditions_sequence
rasqal_query_get_label
rasqal_query_get_limit
rasqal_query_get_name
rasqal_query_get_offset
rasqal_query_get_order_condition
rasqal_query_get_order_conditions_sequence
rasqal_query_get_prefix
rasqal_query_get_prefix_sequence
rasqal_query_get_query_graph_pattern
rasqal_query_get_triple
rasqal_query_get_triple_sequence
rasqal_query_get_user_data
rasqal_query_get_variable
rasqal_query_get_verb
rasqal_query_get_wildcard
rasqal_query_graph_pattern_visit
rasqal_query_has_variable
rasqal_query_iostream_write_escaped_counted_string
rasqal_query_prepare
rasqal_query_print
rasqal_query_results_finished
rasqal_query_results_formats_check
rasqal_query_results_formats_enumerate
rasqal_query_results_formatter_get_mime_type
rasqal_query_results_formatter_read
rasqal_query_results_formatter_write
rasqal_query_results_get_binding_name
rasqal_query_results_get_binding_value
rasqal_query_results_get_binding_value_by_name
rasqal_query_results_get_bindings
rasqal_query_results_get_bindings_count
rasqal_query_results_get_boolean
rasqal_query_results_get_count
rasqal_query_results_get_triple
rasqal_query_results_is_bindings
rasqal_query_results_is_boolean
rasqal_query_results_is_graph
rasqal_query_results_is_syntax
rasqal_query_results_next
rasqal_query_results_next_triple
rasqal_query_results_read
rasqal_query_results_write
rasqal_query_set_default_generate_bnodeid_parameters
rasqal_query_set_distinct
rasqal_query_set_error_handler
rasqal_query_set_explain
rasqal_query_set_fatal_error_handler
rasqal_query_set_feature
rasqal_query_set_feature_string
rasqal_query_set_generate_bnodeid_handler
rasqal_query_set_limit
rasqal_query_set_offset
rasqal_query_set_user_data
rasqal_query_set_variable
rasqal_query_set_warning_handler
rasqal_query_verb_as_string
rasqal_query_write
rasqal_set_triples_source_factory
rasqal_short_copyright_string
rasqal_triple_get_origin
rasqal_triple_print
rasqal_triple_set_origin
rasqal_variable_print
rasqal_variable_set_value
rasqal_version_decimal
rasqal_version_major
rasqal_version_minor
rasqal_version_release
rasqal_version_string
rasqal_xsd_decimal_add
rasqal_xsd_decimal_as_counted_string
rasqal_xsd_decimal_as_string
rasqal_xsd_decimal_compare
rasqal_xsd_decimal_divide
rasqal_xsd_decimal_equals
rasqal_xsd_decimal_get_double
rasqal_xsd_decimal_is_zero
rasqal_xsd_decimal_multiply
rasqal_xsd_decimal_negate
rasqal_xsd_decimal_print
rasqal_xsd_decimal_set_double
rasqal_xsd_decimal_set_long
rasqal_xsd_decimal_set_string
rasqal_xsd_decimal_subtract
Sections
.text Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 41KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 151KB - Virtual size: 152KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE