o:\OOO320\src\goodies\wntmsci12.pro\bin\egimi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ef2e17328dab632a892b96e5f501f2ee_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
ef2e17328dab632a892b96e5f501f2ee_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
ef2e17328dab632a892b96e5f501f2ee_JaffaCakes118
-
Size
25KB
-
MD5
ef2e17328dab632a892b96e5f501f2ee
-
SHA1
3b0c92cc96ee6e118e508f48c0f8fd437b999025
-
SHA256
a9903e45f51ee37bf4b6cf178d354fbd55a824f34415f13d0f0741aa287b9567
-
SHA512
38e9a0741016a074ea62e7f19de502110377cba2b65727b0644affd7c15568675c1e1feb5c08b9fb8600c18531d12f956a0b90267e109e5f0ee551a2317c4013
-
SSDEEP
768:UMJFFaE8bBN45VstY5IWzkjEadDOIIKH:FaEGBNqsTWz0DOIIKH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ef2e17328dab632a892b96e5f501f2ee_JaffaCakes118
Files
-
ef2e17328dab632a892b96e5f501f2ee_JaffaCakes118.dll windows:5 windows x86 arch:x86
855d8ca49386dd6ed61cf2ad0783bedf
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
tlmi
??6SvStream@@QAEAAV0@E@Z
??6SvStream@@QAEAAV0@G@Z
?GetError@SvStream@@QBEKXZ
??BString@@QBE?AVOUString@rtl@@XZ
?SeekRel@SvStream@@QAEKJ@Z
??1ResMgr@@QAE@XZ
??6SvStream@@QAEAAV0@K@Z
??1ByteString@@QAE@XZ
?CreateResMgr@ResMgr@@SAPAV1@PBDULocale@lang@star@sun@com@@@Z
?GetBuffer@ByteString@@QBEPBDXZ
??0ByteString@@QAE@PBD@Z
?SetNumberFormatInt@SvStream@@QAEXG@Z
??1String@@QAE@XZ
??0String@@QAE@PBDGGK@Z
??0String@@QAE@ABVResId@@@Z
??0Link@@QAE@PAXP6AJ00@Z@Z
?FreeResource@Resource@@IAEXXZ
?Write@SvStream@@QAEKPBXK@Z
??0Color@@QAE@EEE@Z
vclmi
?SetSettings@Window@@UAEXABVAllSettings@@@Z
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?MouseMove@Window@@UAEXABVMouseEvent@@@Z
?MouseButtonDown@Window@@UAEXABVMouseEvent@@@Z
?MouseButtonUp@Window@@UAEXABVMouseEvent@@@Z
?KeyInput@Window@@UAEXABVKeyEvent@@@Z
?KeyUp@Window@@UAEXABVKeyEvent@@@Z
?PrePaint@Window@@UAEXXZ
?Paint@Window@@UAEXABVRectangle@@@Z
?Draw@Dialog@@MAEXPAVOutputDevice@@ABVPoint@@ABVSize@@K@Z
?Move@Window@@UAEXXZ
?Resize@Window@@UAEXXZ
?Activate@Window@@UAEXXZ
?Deactivate@Window@@UAEXXZ
?GetFocus@Window@@UAEXXZ
?LoseFocus@Window@@UAEXXZ
?RequestHelp@Window@@UAEXABVHelpEvent@@@Z
?Command@Window@@UAEXABVCommandEvent@@@Z
?Tracking@Window@@UAEXABVTrackingEvent@@@Z
?UserEvent@Window@@UAEXKPAX@Z
?StateChanged@Dialog@@UAEXG@Z
?DataChanged@Dialog@@UAEXABVDataChangedEvent@@@Z
?PreNotify@SystemWindow@@UAEJAAVNotifyEvent@@@Z
?Notify@Dialog@@UAEJAAVNotifyEvent@@@Z
?GetPreferredKeyInputWindow@Window@@UAEPAV1@XZ
?SetSettings@Window@@UAEXABVAllSettings@@E@Z
??1PushButton@@UAE@XZ
?SetPosSizePixel@Window@@UAEXJJJJG@Z
?SetPosPixel@Window@@UAEXABVPoint@@@Z
?GetPosPixel@Window@@UBE?AVPoint@@XZ
?SetSizePixel@Window@@UAEXABVSize@@@Z
?GetSizePixel@Window@@UBE?AVSize@@XZ
?SetOutputSizePixel@Window@@UAEXABVSize@@@Z
?IsScrollable@Window@@UBEEXZ
?Scroll@Window@@UAEXJJABVRectangle@@G@Z
?Scroll@Window@@UAEXJJG@Z
?Invalidate@Window@@UAEXABVRegion@@G@Z
?Invalidate@Window@@UAEXABVRectangle@@G@Z
?Invalidate@Window@@UAEXG@Z
?SetText@Window@@UAEXABVString@@@Z
?GetText@Window@@UBE?AVString@@XZ
?GetDisplayText@Window@@UBE?AVString@@XZ
?GetDisplayBackground@Window@@UBEABVWallpaper@@XZ
?GetComponentInterface@Window@@UAE?AV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@E@Z
?SetComponentInterface@Window@@UAEXV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@@Z
?CreateAccessible@Window@@UAE?AV?$Reference@VXAccessible@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?GetParentLabelFor@Window@@UBEPAV1@PBV1@@Z
?GetParentLabeledBy@Window@@UBEPAV1@PBV1@@Z
?GetDropTarget@Window@@UAE?AV?$Reference@VXDropTarget@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragSource@Window@@UAE?AV?$Reference@VXDragSource@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragGestureRecognizer@Window@@UAE?AV?$Reference@VXDragGestureRecognizer@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetClipboard@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetPrimarySelection@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetOptimalSize@Window@@UBE?AVSize@@W4WindowSizeType@@@Z
?GetSurroundingText@Window@@UBE?AVString@@XZ
?GetSurroundingTextSelection@Window@@UBE?AVSelection@@XZ
?Close@Dialog@@UAEEXZ
?TitleButtonClick@SystemWindow@@UAEXG@Z
?Pin@SystemWindow@@UAEXXZ
?Roll@SystemWindow@@UAEXXZ
?Resizing@SystemWindow@@UAEXAAVSize@@@Z
?Execute@Dialog@@UAEFXZ
?StartExecuteModal@Dialog@@UAEXABVLink@@@Z
?EndDialog@Dialog@@QAEXJ@Z
?IsChecked@CheckBox@@QBEEXZ
?SetClickHdl@Button@@QAEXABVLink@@@Z
?Check@CheckBox@@QAEXE@Z
??0HelpButton@@QAE@PAVWindow@@ABVResId@@@Z
??0CancelButton@@QAE@PAVWindow@@ABVResId@@@Z
??0OKButton@@QAE@PAVWindow@@ABVResId@@@Z
??0FixedLine@@QAE@PAVWindow@@ABVResId@@@Z
??0CheckBox@@QAE@PAVWindow@@ABVResId@@@Z
??0ModalDialog@@QAE@PAVWindow@@ABVResId@@@Z
??1Control@@UAE@XZ
??1Button@@UAE@XZ
??1Dialog@@UAE@XZ
?GetPrefMapMode@Graphic@@QBE?AVMapMode@@XZ
?GetMapUnit@MapMode@@QBE?AW4MapUnit@@XZ
?GetDefaultDevice@Application@@SAPAVOutputDevice@@XZ
??0MapMode@@QAE@W4MapUnit@@@Z
?GetPrefSize@Graphic@@QBE?AVSize@@XZ
?LogicToLogic@OutputDevice@@SA?AVSize@@ABV2@ABVMapMode@@1@Z
??1MapMode@@QAE@XZ
?IsAnimated@Graphic@@QBEEXZ
?GetAnimation@Graphic@@QBE?AVAnimation@@XZ
?GetDisplaySizePixel@Animation@@QBEABVSize@@XZ
??1Animation@@QAE@XZ
?IsTransparent@Graphic@@QBEEXZ
??0BitmapEx@@QAE@XZ
??0GraphicConversionParameters@@QAE@ABVSize@@_N11@Z
?GetBitmapEx@Graphic@@QBE?AVBitmapEx@@ABVGraphicConversionParameters@@@Z
??4BitmapEx@@QAEAAV0@ABV0@@Z
??1BitmapEx@@QAE@XZ
?GetBitmap@Graphic@@QBE?AVBitmap@@ABVGraphicConversionParameters@@@Z
??0BitmapEx@@QAE@ABVBitmap@@@Z
?GetSizePixel@BitmapEx@@QBEABVSize@@XZ
?Count@Animation@@QBEGXZ
?Get@Animation@@QBEABUAnimationBitmap@@G@Z
?GetScanlineFormat@BitmapReadAccess@@QBEKXZ
?GetScanline@BitmapReadAccess@@QBEPAEJ@Z
?GetPixel@BitmapReadAccess@@QBE?AVBitmapColor@@JJ@Z
??BBitmapColor@@QBEEXZ
?GetSettings@Application@@SAABVAllSettings@@XZ
?GetUILocale@AllSettings@@QBEABULocale@lang@star@sun@com@@XZ
??0Bitmap@@QAE@XZ
?HasPalette@BitmapReadAccess@@QBEEXZ
?GetPaletteEntryCount@BitmapReadAccess@@QBEGXZ
?GetPaletteColor@BitmapReadAccess@@QBEABVBitmapColor@@G@Z
?GetRed@BitmapColor@@QBEEXZ
?GetGreen@BitmapColor@@QBEEXZ
?GetBlue@BitmapColor@@QBEEXZ
?Width@BitmapReadAccess@@QBEJXZ
?Height@BitmapReadAccess@@QBEJXZ
?GetBitCount@BitmapReadAccess@@QBEGXZ
??0BitmapColor@@QAE@ABVColor@@@Z
?GetBestPaletteIndex@BitmapReadAccess@@QBEGABVBitmapColor@@@Z
??1BitmapColor@@QAE@XZ
?GetLoopCount@Animation@@QBEKXZ
?ReleaseAccess@Bitmap@@QAEXPAVBitmapReadAccess@@@Z
?GetMask@BitmapEx@@QBE?AVBitmap@@XZ
?GetBitmap@BitmapEx@@QBE?AVBitmap@@PBVColor@@@Z
??4Bitmap@@QAEAAV0@ABV0@@Z
??1Bitmap@@QAE@XZ
??7Bitmap@@QBEEXZ
?Convert@Bitmap@@QAEEW4BmpConversion@@@Z
?Replace@Bitmap@@QAEEABV1@ABVColor@@@Z
?AcquireReadAccess@Bitmap@@QAEPAVBitmapReadAccess@@XZ
?SetPosSizePixel@Window@@UAEXABVPoint@@ABVSize@@@Z
cppu3
typelib_static_type_init
uno_type_sequence_assign
uno_type_destructData
typelib_static_sequence_type_init
svtmi
?GetFilterData@FilterConfigItem@@QBE?AV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@XZ
??1FilterConfigItem@@QAE@XZ
?GetStatusIndicator@FilterConfigItem@@QBE?AV?$Reference@VXStatusIndicator@task@star@sun@com@@@uno@star@sun@com@@XZ
??0FilterConfigItem@@QAE@ABVOUString@rtl@@PAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?WriteInt32@FilterConfigItem@@QAEXABVOUString@rtl@@J@Z
?ReadInt32@FilterConfigItem@@QAEJABVOUString@rtl@@J@Z
sal3
rtl_uString_acquire
rtl_uString_new
rtl_uString_release
msvcr90
__clean_type_info_names_internal
__CppXcptFilter
__dllonexit
_lock
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??2@YAPAXI@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??3@YAXPAX@Z
_unlock
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
_except_handler4_common
_onexit
kernel32
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedExchange
Exports
Exports
DoExportDialog
GetVersionInfo
GraphicExport
Sections
.text Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ