dcf25f8e1cb7e070485df61946fe44ee_JaffaCakes118

Sharing

Copy URL

Twitter E-mail

General

Target

dcf25f8e1cb7e070485df61946fe44ee_JaffaCakes118
Size

198KB
MD5

dcf25f8e1cb7e070485df61946fe44ee
SHA1

a70e54d166f32ea739920a5b800db830b968f3b9
SHA256

734f57a5416edd5b7fec390dd40da95f5f66032d58cf6922e6fb8e6ff25178f8
SHA512

88ead6afe7fecdf709a65e238ec9027b34946dbb9d5439805b4ea59e681e081ba8281ecf7716f64532013f8be12c93073cc83935474ad60cb9b3c0e982a7e139
SSDEEP

6144:3xMOSTUeBNcdRC2hevCroaqCOH961Rb+AsO:ePX2hevCEamib+As

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dcf25f8e1cb7e070485df61946fe44ee_JaffaCakes118

Files

dcf25f8e1cb7e070485df61946fe44ee_JaffaCakes118
.dll windows:4 windows x86 arch:x86

77f63a71b92c3b920fea4dd0f1ee226e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

G:\CXR18\BSF\intel_a\code\bin\DNBVNCCollision.pdb

Imports

js0group

?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
??1CATTrace@@QAE@XZ
??0CATTrace@@QAE@QBDQADW4CATTraMode@@0H@Z
??2CATBaseUnknown@@SAPAXI@Z
??BCATBaseUnknown_var@@QBGPAVCATBaseUnknown@@XZ
?IsAKindOf@CATMetaClass@@QBEHPBD@Z
?IsA@CATMetaClass@@QBEPBDXZ
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
??3CATBaseUnknown@@SAXPAX@Z
??CCATBaseUnknown_var@@QBGPAVCATBaseUnknown@@XZ
?CLSID_CATBaseUnknown@@3U_GUID@@B
??1CATBaseUnknown_var@@QAE@XZ
?Release@CATBaseUnknown@@UAGKXZ
??0CATBaseUnknown@@QAE@XZ
??0CATBaseUnknown_var@@QAE@XZ
??0CATRawColldouble@@QAE@H@Z
??0CATBaseUnknown_var@@QAE@PAVCATBaseUnknown@@@Z
??1CATRawColldouble@@UAE@XZ
?MetaObject@CATBaseUnknown@@SGPAVCATMetaClass@@XZ
?fct_RetrieveMetaObject@@YAPAVCATMetaClass@@PBDW4ENUMTypeOfClass@@PAV1@00J@Z
??4CATBaseUnknown@@QAEAAV0@ABV0@@Z
??4CATBaseUnknown_var@@QAGAAV0@ABV0@@Z
??4CATRawColldouble@@QAEAAV0@ABV0@@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?IsNull@CATBaseUnknown@@UBEHXZ
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?AddRef@CATBaseUnknown@@UAGKXZ
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
??0CATBaseUnknown@@QAE@ABV0@@Z
??0CATBaseUnknown_var@@QAE@ABV0@@Z
??8CATBaseUnknown_var@@QBGHPAVCATBaseUnknown@@@Z
??0CATRawColldouble@@QAE@ABV0@@Z
??1CATBaseUnknown@@UAE@XZ
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z

catobjectmodelerbase

??1CATListPtrCATBaseUnknown@@UAE@XZ
??0CATListPtrCATBaseUnknown@@QAE@H@Z
?Append@CATListPtrCATBaseUnknown@@QAEXPAVCATBaseUnknown@@@Z
?InsertAt@CATListPtrCATBaseUnknown@@QAEXHPAVCATBaseUnknown@@@Z
?RemovePosition@CATListPtrCATBaseUnknown@@QAEXH@Z
?Size@CATListPtrCATBaseUnknown@@QBEHXZ
??ACATListPtrCATBaseUnknown@@QAEAAPAVCATBaseUnknown@@H@Z
?RemoveAll@CATListPtrCATBaseUnknown@@QAEXW4MemoryHandling@CATCollec@@@Z

dnbsystem

??3DNBDynamicObject@@SAXPAXI@Z
??1DNBUUID@@QAE@XZ
??0DNBUUID@@QAE@PBD@Z
??0DNBClassInfo@@QAE@ABVtype_info@@IP6APAVDNBDynamicObject@@XZPBV0@2@Z
??_VDNBDynamicObject@@SAXPAXI@Z
?duplicateObject@DNBDynamicObject@@MBEPAV1@W4CopyMode@1@@Z
?replicateObject@DNBDynamicObject@@MBEPAV1@XZ
?isOrphaned@DNBDynamicObject@@IBE_NXZ
??0DNBMsgBase@@QAE@ABV0@@Z
??0DNBMsgData@@QAE@ABV0@@Z
??0DNBMessage@@QAE@ABV0@@Z
??0DNBException@@QAE@ABV0@@Z
??0DNBERuntimeError@@QAE@ABV0@@Z
??0DNBEInvalidCast@@QAE@PBGPBDH@Z
??0DNBEInvalidCast@@QAE@ABV0@@Z
??1DNBEInvalidCast@@UAE@XZ
??2DNBDynamicObject@@SAPAXI@Z
??1DNBClassInfo@@QAE@XZ
?isDerivedFrom@DNBClassInfo@@QBE_NABV1@@Z
?isInstanceOf@DNBClassInfo@@QBE_NABV1@@Z
?getClassName@DNBClassInfo@@QBE?AV?$scl_basic_string@DU?$scl_char_traits@D@@V?$scl_allocator@D@@@@XZ

dnbobjectmodel

?orphanObject@DNBExtensionObject@@MAEXXZ
?ClassInfo@DNBExtensionObject@@SAABVDNBClassInfo@@XZ
??0DNBExtensionObject@@IAE@ABV0@W4CopyMode@DNBDynamicObject@@@Z
?duplicateObject@DNBExtensionObject@@MBEPAVDNBDynamicObject@@W4CopyMode@2@V?$DNBSharedHandle@VDNBNotificationAgent@@@@@Z
?onNotificationTxn@DNBNotificationAgent@@MAEXW4TransactionTrigger@DNBSharedObject@@@Z
??0DNBExtensionObject@@IAE@XZ
??1DNBExtensionObject@@MAE@XZ
??1DNBSharedBase@@IAE@XZ
?bindExtension@DNBExtensionObject@@IAEXV?$DNBSharedHandle@VDNBExtendibleObject@@@@@Z
?_getReferent@DNBSharedBase@@QBEPAVDNBSharedObject@@XZ
?getReferent@DNBSharedBase@@IBEPAVDNBSharedObject@@XZ
?detach@DNBSharedBase@@IAEXXZ
??0DNBSharedBase@@IAE@PBVDNBSharedObject@@W4LockMode@0@@Z
??0DNBSharedBase@@IAE@ABV0@W4LockMode@0@@Z

dnbvncitf

?__CastTo@DNBIVncISOPanelMgt_var@@AAGXPAUIUnknown@@@Z
?__CastTo@DNBIVncCollisionAccess_var@@AAGXPAUIUnknown@@@Z

dnbvncutils

?getPartialSimulation@@YAEXZ
?IsISOSimulationMode@@YAEXZ

catmanufacturinginterfaces

?__CastTo@CATIMfgActivity_var@@AAGXPAUIUnknown@@@Z

msvcr80

_malloc_crt
free
_encoded_null
_initterm
_initterm_e
_amsg_exit
_decode_pointer
__CppXcptFilter
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_crt_debugger_hook
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
?terminate@@YAXXZ
??3@YAXPAX@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
__RTDynamicCast
??_V@YAXPAX@Z
__CxxFrameHandler3
_adjust_fdiv

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

Exports

Exports

??0DNBVNCClashDetails@@QAE@ABV0@@Z
??0DNBVNCClashDetails@@QAE@XZ
??0DNBVNCCollisionExt@@IAE@ABV0@W4CopyMode@DNBDynamicObject@@@Z
??0DNBVNCCollisionExt@@IAE@XZ
??1DNBVNCClashDetails@@UAE@XZ
??1DNBVNCCollisionExt@@MAE@XZ
??4DNBVNCClashDetails@@QAEAAV0@ABV0@@Z
??_7DNBVNCClashDetails@@6B@
??_7DNBVNCCollisionExt@@6B@
?AppendToClashList@@YAJAAHAAVCATBaseUnknown_var@@AAVCATRawColldouble@@H@Z
?ClassID@DNBVNCCollisionExt@@SAABVDNBUUID@@XZ
?ClassID_@DNBVNCCollisionExt@@0VDNBUUID@@B
?ClassId@DNBVNCClashDetails@@SGABU_GUID@@XZ
?ClassInfo@DNBVNCCollisionExt@@SAABVDNBClassInfo@@XZ
?ClassInfo_@DNBVNCCollisionExt@@0VDNBClassInfo@@B
?ClassName@DNBVNCClashDetails@@SGPBDXZ
?ClassName@DNBVNCCollisionExt@@SA?AV?$scl_basic_string@DU?$scl_char_traits@D@@V?$scl_allocator@D@@@@XZ
?CloneObject@DNBVNCCollisionExt@@KA?AV?$DNBSharedHandle@VDNBVNCCollisionExt@@@@V2@W4CopyMode@DNBDynamicObject@@V?$DNBSharedHandle@VDNBBasicDevice3D@@@@@Z
?CreateItself@DNBVNCClashDetails@@SAPAVCATBaseUnknown@@XZ
?CreateObject@DNBVNCCollisionExt@@KA?AV?$DNBSharedHandle@VDNBVNCCollisionExt@@@@V?$DNBSharedHandle@VDNBBasicDevice3D@@@@@Z
?DeleteClashList@@YAXXZ
?DestroyObject@DNBVNCCollisionExt@@KAXV?$DNBSharedHandle@VDNBVNCCollisionExt@@@@@Z
?GetClashDetails@DNBVNCClashDetails@@UAGJAAHAAPAVCATBaseUnknown@@AAVCATRawColldouble@@@Z
?GetClashElement@@YAJHAAPAVDNBVNCClashDetails@@@Z
?GetClashListSize@@YAHXZ
?GetClashType@DNBVNCClashDetails@@UAGJAAH@Z
?GetMetaObject@DNBVNCClashDetails@@UBGPAVCATMetaClass@@XZ
?GetRank_N_Mo@DNBVNCCollisionExt@@QBEXAAHAAVCATBaseUnknown_var@@@Z
?InsertToClashList@@YAJAAHAAVCATBaseUnknown_var@@AAVCATRawColldouble@@H@Z
?IsA@DNBVNCClashDetails@@UBEPBDXZ
?IsAKindOf@DNBVNCClashDetails@@UBEHPBD@Z
?MetaObject@DNBVNCClashDetails@@SGPAVCATMetaClass@@XZ
?RemoveClashElement@@YAJH@Z
?SetClashDetails@DNBVNCClashDetails@@UAGJAAHAAVCATBaseUnknown_var@@AAVCATRawColldouble@@H@Z
?SetRank_N_Mo@DNBVNCCollisionExt@@QAEXAAHAAVCATBaseUnknown_var@@@Z
?_CreateObject@DNBVNCCollisionExt@@CAPAVDNBDynamicObject@@XZ
?_duplicateObject@DNBVNCCollisionExt@@EBEPAVDNBDynamicObject@@W4CopyMode@2@@Z
?_replicateObject@DNBVNCCollisionExt@@EBEPAVDNBDynamicObject@@XZ
?bindMembers@DNBVNCCollisionExt@@MAEXXZ
?clone@DNBVNCCollisionExt@@SA?AV?$DNBSharedHandle@VDNBVNCCollisionExt@@@@V2@W4CopyMode@DNBDynamicObject@@V?$DNBSharedHandle@VDNBBasicDevice3D@@@@@Z
?create@DNBVNCCollisionExt@@SA?AV?$DNBSharedHandle@VDNBVNCCollisionExt@@@@V?$DNBSharedHandle@VDNBBasicDevice3D@@@@@Z
?destroy@DNBVNCCollisionExt@@SAXAAV?$DNBSharedHandle@VDNBVNCCollisionExt@@@@@Z
?getClassID@DNBVNCCollisionExt@@UBEABVDNBUUID@@XZ
?getClassInfo@DNBVNCCollisionExt@@UBEABVDNBClassInfo@@XZ
?getClassName@DNBVNCCollisionExt@@UBE?AV?$scl_basic_string@DU?$scl_char_traits@D@@V?$scl_allocator@D@@@@XZ
?getFlipState@DNBVNCCollisionExt@@QAEEXZ
?isDerivedFrom@DNBVNCCollisionExt@@UBE_NABVDNBClassInfo@@@Z
?isInstanceOf@DNBVNCCollisionExt@@UBE_NABVDNBClassInfo@@@Z
?meta_object@DNBVNCClashDetails@@0PAVCATMetaClass@@A
?orphanMembers@DNBVNCCollisionExt@@AAEXXZ
?orphanObject@DNBVNCCollisionExt@@MAEXXZ
?setFlipState@DNBVNCCollisionExt@@QAEXE@Z
DASSAULT_SYSTEMES_CAA2_INTERNAL_DNBVNCCollision

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 173KB - Virtual size: 173KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

77f63a71b92c3b920fea4dd0f1ee226e

Headers

File Characteristics

PDB Paths

Imports

js0group

catobjectmodelerbase

dnbsystem

dnbobjectmodel

dnbvncitf

dnbvncutils

catmanufacturinginterfaces

msvcr80

kernel32

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 7KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 173KB - Virtual size: 173KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 8KB - Virtual size: 7KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 173KB - Virtual size: 173KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB