G:\CXR18\BSF\intel_a\code\bin\CATDMUOverlaySettingsCtrl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
de2b7c8aff8a0472546458bacb192dbe_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
de2b7c8aff8a0472546458bacb192dbe_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
de2b7c8aff8a0472546458bacb192dbe_JaffaCakes118
-
Size
216KB
-
MD5
de2b7c8aff8a0472546458bacb192dbe
-
SHA1
aa02f6075e5305d0019af83a5c2b237e3ce1a2f7
-
SHA256
100a07d87367159961cf46a107bfb30318e337fc38d8a21ffc277fc75d2ef17e
-
SHA512
e6bf0af58ba4c9a650904239b87d5aaab39ae9902130afb6494b8d91d01f3b15a9311d92c7dbe6631b03bb2c70cd848b350da7257fbce9da0e9777cc953c2ce1
-
SSDEEP
6144:wiugrgPJ5/v/uWf16ZHmbJaZIJuoEEXdFJf:wJHPJlUGFaWEEXdFJf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource de2b7c8aff8a0472546458bacb192dbe_JaffaCakes118
Files
-
de2b7c8aff8a0472546458bacb192dbe_JaffaCakes118.dll windows:4 windows x86 arch:x86
13f234b39aa0cad08218f04b7112c9ab
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
js0group
?IsNull@CATBaseUnknown@@UBEHXZ
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
?Tie_Query@@YAJPAUIUnknown@@PAVCATBaseUnknown@@1PAVCATMetaClass@@HABU_GUID@@PAPAX@Z
?Tie_AddRef@@YAKPAVCATBaseUnknown@@W4ENUMTypeOfClass@@PAJ@Z
?Tie_Release@@YAKPAHPAPAVCATBaseUnknown@@PAV1@W4ENUMTypeOfClass@@PAJ@Z
?Tie_GetTypeInfoCount@@YAJPAUIDispatch@@PAVCATMetaClass@@PAI@Z
?Tie_GetTypeInfo@@YAJPAUIDispatch@@PAVCATMetaClass@@IKPAPAUITypeInfo@@@Z
?Tie_GetIDsOfNames@@YAJPAUIDispatch@@PAVCATMetaClass@@ABU_GUID@@PAPAGIKPAJ@Z
?Tie_Invoke@@YAJPAUIDispatch@@PAVCATMetaClass@@JABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
ExitAfterCall
?Run@Tie_StackCtx@@QAEPAVCATBaseUnknown@@PAV2@0@Z
ExitBeforeCall
??0CATSysAutoSettingController@@IAE@XZ
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?AddRef@CATBaseUnknown@@UAGKXZ
?Release@CATBaseUnknown@@UAGKXZ
?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?ChangeComponentState@CATBaseObject@@UAEJW4ComponentState@CATBaseUnknown@@0PBVCATSysChangeComponentStateContext@@@Z
?get_Application@CATBaseObject@@UAEJAAPAVCATIAApplication@@@Z
?get_Parent@CATBaseObject@@UAGJAAPAVCATBaseDispatch@@@Z
?get_Name@CATBaseObject@@UAEJAAPAG@Z
?put_Name@CATBaseObject@@UAEJABQAG@Z
?SetName@CATBaseObject@@UAEJABVCATUnicodeString@@@Z
?GetItem@CATBaseObject@@UAEJABQAGAAPAVCATBaseDispatch@@@Z
?Commit@CATSysAutoSettingController@@UAEJXZ
?Rollback@CATSysAutoSettingController@@UAEJXZ
?ResetToAdminValues@CATSysAutoSettingController@@UAEJXZ
?ResetToAdminValuesByName@CATSysAutoSettingController@@UAEJABUtagSAFEARRAY@@@Z
?SaveRepository@CATSysAutoSettingController@@UAEJXZ
?Initialize@CATSysAutoSettingController@@MAEJXZ
??1CATSysAutoSettingController@@UAE@XZ
??1CATUnicodeString@@QAE@XZ
?MapLock@CATSysSettingController@@SAXAAVCATSettingInfo@@AAVCATUnicodeString@@@Z
?ConvertToBSTR@CATUnicodeString@@QBEXPAPAG@Z
?MapLevel@CATSysSettingController@@SAXAAVCATSettingInfo@@AAVCATUnicodeString@@@Z
??0CATUnicodeString@@QAE@XZ
??1CATSettingInfo@@UAE@XZ
??0CATSettingInfo@@QAE@XZ
?BuildFromBSTR@CATUnicodeString@@QAEHABQAG@Z
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
?IsA@CATMetaClass@@QBEPBDXZ
?IsAKindOf@CATMetaClass@@QBEHPBD@Z
??2CATBaseUnknown@@SAPAXI@Z
?Tie_Construct@@YAPAVCATBaseUnknown@@PAUIUnknown@@PAVCATMetaClass@@PAPAV1@HPAV1@ABU_GUID@@W4ENUMTypeOfClass@@3P6APAV1@XZ32@Z
??3CATBaseUnknown@@SAXPAX@Z
?Tie_Link@@YAPAUIUnknown@@PAVCATBaseUnknown@@0ABU_GUID@@@Z
??0CATFillDictionary@@QAE@PBVCATMetaClass@@0PAX1H@Z
??0CATBaseUnknown@@QAE@XZ
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?IID_CATICreateInstance@@3U_GUID@@A
?MetaObject@CATICreateInstance@@SGPAVCATMetaClass@@XZ
??1CATICreateInstance@@UAE@XZ
?IsA@CATBaseUnknown@@UBEPBDXZ
?IsAKindOf@CATBaseUnknown@@UBEHPBD@Z
?MetaObject@CATSysSettingController@@SGPAVCATMetaClass@@XZ
?IID_CATISysSettingController@@3U_GUID@@A
?MetaObject@CATISysSettingController@@SGPAVCATMetaClass@@XZ
??1CATISysSettingController@@UAE@XZ
??0CATSysSettingController@@IAE@PBD@Z
?AddCallback@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@Z2@Z
?RemoveCallback@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@J@Z
?RemoveCallbacksOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPAX@Z
?RemoveSubscriberCallbacks@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@@Z
?GetCallbackManager@CATEventSubscriber@@UAEPAVCATCallbackManager@@XZ
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZABU_GUID@@2@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDABU_GUID@@PAX@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPADPAX@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@ABU_GUID@@@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PAD@Z
?Commit@CATSysSettingController@@UAEJH@Z
?Rollback@CATSysSettingController@@UAEJXZ
?ResetToAdminValues@CATSysSettingController@@UAEJPAPADH@Z
?SaveRepository@CATSysSettingController@@UAEJPBD@Z
?Initialize@CATSysSettingController@@MAEJXZ
?Dump@CATSysSettingController@@UAEJPAPADI@Z
??1CATSysSettingController@@UAE@XZ
?ReadAttr@CATSysSettingController@@IAEJPBDPAHJ@Z
?WriteAttr@CATSysSettingController@@IAEJPBDPAHJ@Z
?Lock@CATSysSettingController@@IAEJPBD@Z
?Unlock@CATSysSettingController@@IAEJPBD@Z
??1CATString@@QAE@XZ
??4CATUnicodeString@@QAEAAV0@ABV0@@Z
?BuildMessage@CATMsgCatalog@@SA?BVCATUnicodeString@@ABVCATString@@0PAV2@HABV2@@Z
??0CATString@@QAE@QBD@Z
??0CATUnicodeString@@QAE@QBD@Z
?GetLengthInChar@CATUnicodeString@@QBEHXZ
?ReadAttr@CATSysSettingController@@IAEJPBDPAVCATUnicodeString@@@Z
??4CATUnicodeString@@QAEAAV0@PBD@Z
?Append@CATUnicodeString@@QAEAAV1@ABV1@@Z
?SearchSubString@CATUnicodeString@@QBEHABV1@HW4CATSearchMode@1@@Z
??0CATUnicodeString@@QAE@ABV0@@Z
?WriteAttr@CATSysSettingController@@IAEJPBDPAVCATUnicodeString@@@Z
?ReadAttr@CATSysSettingController@@IAEJPBDPAIJ@Z
?WriteAttr@CATSysSettingController@@IAEJPBDPAIJ@Z
??0CATICreateInstance@@QAE@XZ
??0CATISysSettingController@@QAE@XZ
?SetFunc@CATSettingInfo@@QAEXP8CATSysSettingController@@AEJPAV1@@ZP82@AEJE@ZPAV2@PAD@Z
?GetInfo@CATSysSettingController@@IAEJPBDPAVCATSettingInfo@@H@Z
??0CATSysParamMap@@QAE@PAPAV0@PAPAD@Z
??1CATSysParamMap@@QAE@XZ
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?IsAKindOf@CATBaseDispatch@@UBEHPBD@Z
?IsA@CATBaseDispatch@@UBEPBDXZ
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?GetTypeOfClass@CATMetaClass@@QBG?AW4ENUMTypeOfClass@@XZ
?Tie_Destruct@@YAXPAUIUnknown@@PAPAVCATBaseUnknown@@W4ENUMTypeOfClass@@J@Z
??2CATMetaClass@@SAPAXI@Z
??0CATMetaClass@@QAE@PBU_GUID@@PBDPAV0@2W4ENUMTypeOfClass@@@Z
?MetaObject@CATBaseUnknown@@SGPAVCATMetaClass@@XZ
??1CATBaseUnknown@@UAE@XZ
?fct_RetrieveMetaObject@@YAPAVCATMetaClass@@PBDW4ENUMTypeOfClass@@PAV1@00J@Z
catnavigatoritf
??0CATIAOverlaySettingAtt@@QAE@XZ
??0CATIDMUOverlaySettingAtt@@QAE@XZ
??1CATIDMUOverlaySettingAtt@@UAE@XZ
?MetaObject@CATIDMUOverlaySettingAtt@@SGPAVCATMetaClass@@XZ
?IID_CATIAOverlaySettingAtt@@3U_GUID@@A
?IID_CATIDMUOverlaySettingAtt@@3U_GUID@@A
??1CATIAOverlaySettingAtt@@UAE@XZ
?MetaObject@CATIAOverlaySettingAtt@@SGPAVCATMetaClass@@XZ
catviz
?sGetDefaultFont@CATFont@@SAPADXZ
msvcr80
__CppXcptFilter
_adjust_fdiv
__clean_type_info_names_internal
_crt_debugger_hook
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
_decode_pointer
_onexit
_lock
_encode_pointer
__dllonexit
_unlock
_except_handler4_common
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
CreateTIECATIAOverlaySettingAttCATDMUOverlayAutoSettingCtrl
CreateTIECATICreateInstanceCATDMUOverlaySettingCtrlExt
CreateTIECATIDMUOverlaySettingAttCATDMUOverlaySettingCtrl
CreateTIECATISysSettingControllerCATDMUOverlaySettingCtrl
DASSAULT_SYSTEMES_CAA2_INTERNAL_CATDMUOverlaySettingsCtrl
Sections
.text Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ