O:\OOO330\ooo\fpicker\wntmsci12.pro\bin\fpicker.uno.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dd5f553f745ba4788ca618a9cc59c39b_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
dd5f553f745ba4788ca618a9cc59c39b_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
dd5f553f745ba4788ca618a9cc59c39b_JaffaCakes118
-
Size
15KB
-
MD5
dd5f553f745ba4788ca618a9cc59c39b
-
SHA1
5cc034206bd668e1b3bbd8e2b676d315a7fd7818
-
SHA256
3716f0098ad43634be0adb118bf858c0d0c2bd67939ab15b35571539b98f78da
-
SHA512
0c9c0742cce8cd9461ed54d7ebea60ce8c583ec6be65572111a48c7e314b87360b4f5ae0ddeec4c03fdfe727a7d721390a5a6b13dc1ca71b6509bbb4e14a97b8
-
SSDEEP
384:roJnizWLrFt6KTGIcQTH0wYpOt1H+Tgbk9:r9KyIcBOt4kA9
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dd5f553f745ba4788ca618a9cc59c39b_JaffaCakes118
Files
-
dd5f553f745ba4788ca618a9cc59c39b_JaffaCakes118.dll windows:5 windows x86 arch:x86
f881f39359886d3041b3ae1882708a00
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
vclmi
?GetDesktopEnvironment@Application@@SAABVOUString@rtl@@XZ
svlmi
?addFilePicker@svt@@YAXABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
?addFolderPicker@svt@@YAXABV?$Reference@VXInterface@uno@star@sun@com@@@uno@star@sun@com@@@Z
svtmi
??1SvtMiscOptions@@UAE@XZ
?UseSystemFileDialog@SvtMiscOptions@@QBEEXZ
??0SvtMiscOptions@@QAE@XZ
cppuhelper3msc
?component_getFactoryHelper@cppu@@YAPAXPBDPAX1QBUImplementationEntry@1@@Z
?component_writeInfoHelper@cppu@@YAEPAX0QBUImplementationEntry@1@@Z
?createSingleComponentFactory@cppu@@YA?AV?$Reference@VXSingleComponentFactory@lang@star@sun@com@@@uno@star@sun@com@@P6A?AV?$Reference@VXInterface@uno@star@sun@com@@@3456@ABV?$Reference@VXComponentContext@uno@star@sun@com@@@3456@@ZABVOUString@rtl@@ABV?$Sequence@VOUString@rtl@@@3456@PAU_rtl_ModuleCount@@@Z
cppu3
uno_type_destructData
typelib_static_type_getByTypeClass
typelib_static_sequence_type_init
uno_type_sequence_construct
uno_type_sequence_reference2One
sal3
rtl_uString_release
rtl_uString_assign
rtl_ustr_ascii_compareIgnoreAsciiCase_WithLength
osl_incrementInterlockedCount
rtl_string2UString
rtl_uString_acquire
msvcr90
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_crt_debugger_hook
__CppXcptFilter
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBDH@Z
__CxxFrameHandler3
?what@exception@std@@UBEPBDXZ
??3@YAXPAX@Z
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
kernel32
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
Exports
Exports
GetVersionInfo
component_getFactory
component_getImplementationEnvironment
component_writeInfo
Sections
.text Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ