o:\OOO320\src\goodies\wntmsci12.pro\bin\epsmi.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f9987a0f1ad23daefad8c36f272a4a92_JaffaCakes118.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f9987a0f1ad23daefad8c36f272a4a92_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
f9987a0f1ad23daefad8c36f272a4a92_JaffaCakes118
-
Size
63KB
-
MD5
f9987a0f1ad23daefad8c36f272a4a92
-
SHA1
a769de9d9015fc80ac09b6682e35eb44627a724b
-
SHA256
6b4e784cc30307d40988892abbb1e0d47e4349e09bf85c6a0bb4bfadf2a778e1
-
SHA512
9cc84d72cb2f7a2066353bf0eff16594fc63ce03ee3c96a1a9a5a24178a0a2e7b40159f75c87c7e1c1e252c1a1d88da8dc1f96945c7428c320e0a305f76d4047
-
SSDEEP
1536:F+YaL9xh8sgdM6jqVNr6w5Rsk8OtxgTYmwo:0lL/h8sgAfr6w5RF8OtxgTYlo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f9987a0f1ad23daefad8c36f272a4a92_JaffaCakes118
Files
-
f9987a0f1ad23daefad8c36f272a4a92_JaffaCakes118.dll windows:5 windows x86 arch:x86
9fd8358cdf566698d3b4069c8bb42b84
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
tlmi
??0String@@QAE@ABV0@GG@Z
??0Polygon@@QAE@ABV0@@Z
??0Polygon@@QAE@ABVRectangle@@ABVPoint@@1W4PolyStyle@@@Z
??0PolyPolygon@@QAE@ABVPolygon@@@Z
??0Polygon@@QAE@ABVPoint@@JJG@Z
?Center@Rectangle@@QBE?AVPoint@@XZ
??0String@@QAE@ABVResId@@@Z
??0Polygon@@QAE@ABVRectangle@@@Z
??6SvStream@@QAEAAV0@K@Z
??BString@@QBE?AVOUString@rtl@@XZ
??0String@@QAE@PBDGGK@Z
?SetNumberFormatInt@SvStream@@QAEXG@Z
??0Link@@QAE@PAXP6AJ00@Z@Z
?FreeResource@Resource@@IAEXXZ
??0PolyPolygon@@QAE@ABV0@@Z
?Seek@SvStream@@QAEKK@Z
??0Fraction@@QAE@N@Z
?Write@SvStream@@QAEKPBXK@Z
?CompareIgnoreCaseToAscii@ByteString@@QBE?AW4StringCompare@@PBDG@Z
?Equals@ByteString@@QBEEPBD@Z
??4PolyPolygon@@QAEAAV0@ABV0@@Z
??0SvMemoryStream@@QAE@PAXKG@Z
??0ByteString@@QAE@XZ
??4ByteString@@QAEAAV0@ABV0@@Z
??0Polygon@@QAE@XZ
??0ByteString@@QAE@ABV0@@Z
?Equals@ByteString@@QBEEABV1@@Z
??1SvMemoryStream@@UAE@XZ
?Len@String@@QBEGXZ
??0Polygon@@QAE@G@Z
??0PolyPolygon@@QAE@GG@Z
?SetPoint@Polygon@@QAEXABVPoint@@G@Z
?Rotate@Polygon@@QAEXABVPoint@@G@Z
??1Polygon@@QAE@XZ
??0ByteString@@QAE@ABVString@@GK@Z
??0Color@@QAE@XZ
?GetWidth@Rectangle@@QBEJXZ
?GetHeight@Rectangle@@QBEJXZ
?TopLeft@Rectangle@@QBE?AVPoint@@XZ
??9Color@@QBEEABV0@@Z
??0ByteString@@QAE@PBD@Z
?GetBuffer@ByteString@@QBEPBDXZ
?CreateResMgr@ResMgr@@SAPAV1@PBDULocale@lang@star@sun@com@@@Z
??BFraction@@QBENXZ
?GetBlue@Color@@QBEEXZ
?GetGreen@Color@@QBEEXZ
?GetRed@Color@@QBEEXZ
??0String@@QAE@D@Z
??0Rectangle@@QAE@ABVPoint@@ABVSize@@@Z
??0Color@@QAE@K@Z
?Move@Rectangle@@QAEXJJ@Z
??0Rectangle@@QAE@XZ
?Left@Rectangle@@QAEAAJXZ
?Top@Rectangle@@QAEAAJXZ
?Right@Rectangle@@QAEAAJXZ
?Bottom@Rectangle@@QAEAAJXZ
?Count@PolyPolygon@@QBEGXZ
?GetObject@PolyPolygon@@QBEABVPolygon@@G@Z
?GetSize@Polygon@@QBEGXZ
?GetPoint@Polygon@@QBEABVPoint@@G@Z
?GetFlags@Polygon@@QBE?AW4PolyFlags@@G@Z
??APolygon@@QBEABVPoint@@G@Z
??6SvStream@@QAEAAV0@PBD@Z
??1PolyPolygon@@QAE@XZ
?SeekRel@SvStream@@QAEKJ@Z
?CreateFromInt32@ByteString@@SA?AV1@JF@Z
?Len@ByteString@@QBEGXZ
?GetChar@ByteString@@QBEDG@Z
??6SvStream@@QAEAAV0@D@Z
??1ByteString@@QAE@XZ
??6SvStream@@QAEAAV0@E@Z
?GetBoundRect@PolyPolygon@@QBE?AVRectangle@@XZ
??1String@@QAE@XZ
??6SvStream@@QAEAAV0@G@Z
??1ResMgr@@QAE@XZ
vclmi
??1Font@@QAE@XZ
??0Font@@QAE@XZ
?GetTextOutlines@OutputDevice@@QBEEAAV?$vector@VPolyPolygon@@V?$allocator@VPolyPolygon@@@_STL@@@_STL@@ABVString@@GGGEKPBJ@Z
?SetTextAlign@OutputDevice@@QAEXW4TextAlign@@@Z
?SetFont@OutputDevice@@QAEXABVFont@@@Z
?SetOrientation@Font@@QAEXF@Z
??0Font@@QAE@ABV0@@Z
?GetWidth@LineInfo@@QBEJXZ
?GetStyle@LineInfo@@QBE?AW4LineStyle@@XZ
??1SvtGraphicFill@@QAE@XZ
??1Graphic@@UAE@XZ
?getFillColor@SvtGraphicFill@@QBE?AVColor@@XZ
?AddAction@GDIMetaFile@@QAEXPAVMetaAction@@@Z
?getPath@SvtGraphicFill@@QBEXAAVPolyPolygon@@@Z
?getFillType@SvtGraphicFill@@QBE?AW4FillType@1@XZ
??5@YAAAVSvStream@@AAV0@AAVSvtGraphicFill@@@Z
??0SvtGraphicFill@@QAE@XZ
??1SvtGraphicStroke@@QAE@XZ
?getMiterLimit@SvtGraphicStroke@@QBENXZ
?getCapType@SvtGraphicStroke@@QBE?AW4CapType@1@XZ
?getDashArray@SvtGraphicStroke@@QBEXAAV?$vector@NV?$allocator@N@_STL@@@_STL@@@Z
?getEndArrow@SvtGraphicStroke@@QBEXAAVPolyPolygon@@@Z
?getStartArrow@SvtGraphicStroke@@QBEXAAVPolyPolygon@@@Z
?getJoinType@SvtGraphicStroke@@QBE?AW4JoinType@1@XZ
?getStrokeWidth@SvtGraphicStroke@@QBENXZ
?getPath@SvtGraphicStroke@@QBEXAAVPolygon@@@Z
??5@YAAAVSvStream@@AAV0@AAVSvtGraphicStroke@@@Z
??0SvtGraphicStroke@@QAE@XZ
?Move@GDIMetaFile@@QAEXJJ@Z
?Scale@GDIMetaFile@@QAEXNN@Z
??1GfxLink@@QAE@XZ
?SetScaleY@MapMode@@QAEXABVFraction@@@Z
?SetScaleX@MapMode@@QAEXABVFraction@@@Z
?SetOrigin@MapMode@@QAEXABVPoint@@@Z
?LogicToLogic@OutputDevice@@SA?AVPoint@@ABV2@ABVMapMode@@1@Z
??0MapMode@@QAE@ABV0@@Z
?GetDataSize@GfxLink@@QBEKXZ
?GetData@GfxLink@@QBEPBEXZ
??0GDIMetaFile@@QAE@ABV0@@Z
?GetOrientation@Font@@QBEFXZ
?Pop@OutputDevice@@QAEXXZ
?Push@OutputDevice@@QAEXG@Z
??0Region@@QAE@ABV0@@Z
??0Region@@QAE@ABVRectangle@@@Z
??1Wallpaper@@QAE@XZ
?GetColor@Wallpaper@@QBEABVColor@@XZ
?IsGradient@Wallpaper@@QBEEXZ
?IsTransparent@BitmapEx@@QBEEXZ
?GetBitmap@Wallpaper@@QBE?AVBitmapEx@@XZ
?IsBitmap@Wallpaper@@QBEEXZ
??0Wallpaper@@QAE@ABV0@@Z
?AddHatchActions@OutputDevice@@QAEXABVPolyPolygon@@ABVHatch@@AAVGDIMetaFile@@@Z
?Crop@BitmapEx@@QAEEABVRectangle@@@Z
??1BitmapEx@@QAE@XZ
?GetMask@BitmapEx@@QBE?AVBitmap@@XZ
?GetBitmap@BitmapEx@@QBE?AVBitmap@@PBVColor@@@Z
??0BitmapEx@@QAE@ABV0@@Z
?GetAction@GDIMetaFile@@QBEPAVMetaAction@@K@Z
?GetActionCount@GDIMetaFile@@QBEKXZ
??1InfoBox@@UAE@XZ
??1MessBox@@UAE@XZ
?Execute@Dialog@@UAEFXZ
??0InfoBox@@QAE@PAVWindow@@ABVString@@@Z
?GetGDIMetaFile@Graphic@@QBEABVGDIMetaFile@@XZ
?GetType@Graphic@@QBE?AW4GraphicType@@XZ
?Export@GraphicConverter@@SAKAAVSvStream@@ABVGraphic@@K@Z
??0Graphic@@QAE@ABVBitmapEx@@@Z
?Convert@BitmapEx@@QAEEW4BmpConversion@@@Z
?GetBitmapEx@Graphic@@QBE?AVBitmapEx@@ABVGraphicConversionParameters@@@Z
?Linker@GDIMetaFile@@MAEXPAVOutputDevice@@E@Z
?Hook@GDIMetaFile@@MAEJXZ
?Disable@Window@@QAEX_N@Z
?IsChecked@RadioButton@@QBEEXZ
?Enable@Window@@QAEX_N0@Z
??1Dialog@@UAE@XZ
??1Button@@UAE@XZ
??1Control@@UAE@XZ
??1RadioButton@@UAE@XZ
??1PushButton@@UAE@XZ
?SetSettings@Window@@UAEXABVAllSettings@@@Z
?SetMapMode@OutputDevice@@UAEXXZ
?SetRelativeMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?MouseMove@Window@@UAEXABVMouseEvent@@@Z
?MouseButtonDown@Window@@UAEXABVMouseEvent@@@Z
?MouseButtonUp@Window@@UAEXABVMouseEvent@@@Z
?KeyInput@Window@@UAEXABVKeyEvent@@@Z
?KeyUp@Window@@UAEXABVKeyEvent@@@Z
?PrePaint@Window@@UAEXXZ
?Paint@Window@@UAEXABVRectangle@@@Z
?Draw@Dialog@@MAEXPAVOutputDevice@@ABVPoint@@ABVSize@@K@Z
?Move@Window@@UAEXXZ
?Resize@Window@@UAEXXZ
?Activate@Window@@UAEXXZ
?Deactivate@Window@@UAEXXZ
?GetFocus@Window@@UAEXXZ
?LoseFocus@Window@@UAEXXZ
?RequestHelp@Window@@UAEXABVHelpEvent@@@Z
?Command@Window@@UAEXABVCommandEvent@@@Z
?Tracking@Window@@UAEXABVTrackingEvent@@@Z
?UserEvent@Window@@UAEXKPAX@Z
?StateChanged@Dialog@@UAEXG@Z
?DataChanged@Dialog@@UAEXABVDataChangedEvent@@@Z
?PreNotify@SystemWindow@@UAEJAAVNotifyEvent@@@Z
?Notify@Dialog@@UAEJAAVNotifyEvent@@@Z
?GetPreferredKeyInputWindow@Window@@UAEPAV1@XZ
?SetSettings@Window@@UAEXABVAllSettings@@E@Z
?SetPosSizePixel@Window@@UAEXABVPoint@@ABVSize@@@Z
?SetPosSizePixel@Window@@UAEXJJJJG@Z
?SetPosPixel@Window@@UAEXABVPoint@@@Z
?GetPosPixel@Window@@UBE?AVPoint@@XZ
?SetSizePixel@Window@@UAEXABVSize@@@Z
?GetSizePixel@Window@@UBE?AVSize@@XZ
?SetOutputSizePixel@Window@@UAEXABVSize@@@Z
?IsScrollable@Window@@UBEEXZ
?Scroll@Window@@UAEXJJABVRectangle@@G@Z
?Scroll@Window@@UAEXJJG@Z
?Invalidate@Window@@UAEXABVRegion@@G@Z
?Invalidate@Window@@UAEXABVRectangle@@G@Z
?Invalidate@Window@@UAEXG@Z
?SetText@Window@@UAEXABVString@@@Z
?GetText@Window@@UBE?AVString@@XZ
?GetDisplayText@Window@@UBE?AVString@@XZ
?GetDisplayBackground@Window@@UBEABVWallpaper@@XZ
?GetComponentInterface@Window@@UAE?AV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@E@Z
?SetComponentInterface@Window@@UAEXV?$Reference@VXWindowPeer@awt@star@sun@com@@@uno@star@sun@com@@@Z
?CreateAccessible@Window@@UAE?AV?$Reference@VXAccessible@accessibility@star@sun@com@@@uno@star@sun@com@@XZ
?GetParentLabelFor@Window@@UBEPAV1@PBV1@@Z
?GetParentLabeledBy@Window@@UBEPAV1@PBV1@@Z
?GetDropTarget@Window@@UAE?AV?$Reference@VXDropTarget@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragSource@Window@@UAE?AV?$Reference@VXDragSource@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetDragGestureRecognizer@Window@@UAE?AV?$Reference@VXDragGestureRecognizer@dnd@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetClipboard@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetPrimarySelection@Window@@UAE?AV?$Reference@VXClipboard@clipboard@datatransfer@star@sun@com@@@uno@star@sun@com@@XZ
?GetOptimalSize@Window@@UBE?AVSize@@W4WindowSizeType@@@Z
?GetSurroundingText@Window@@UBE?AVString@@XZ
?GetSurroundingTextSelection@Window@@UBE?AVSelection@@XZ
?Close@Dialog@@UAEEXZ
?TitleButtonClick@SystemWindow@@UAEXG@Z
?Pin@SystemWindow@@UAEXXZ
?Roll@SystemWindow@@UAEXXZ
?Resizing@SystemWindow@@UAEXAAVSize@@@Z
?StartExecuteModal@Dialog@@UAEXABVLink@@@Z
?EndDialog@Dialog@@QAEXJ@Z
?IsChecked@CheckBox@@QBEEXZ
?SetClickHdl@Button@@QAEXABVLink@@@Z
?Check@RadioButton@@QAEXE@Z
?Check@CheckBox@@QAEXE@Z
??0HelpButton@@QAE@PAVWindow@@ABVResId@@@Z
??0CancelButton@@QAE@PAVWindow@@ABVResId@@@Z
??0OKButton@@QAE@PAVWindow@@ABVResId@@@Z
??0RadioButton@@QAE@PAVWindow@@ABVResId@@@Z
??0CheckBox@@QAE@PAVWindow@@ABVResId@@@Z
??0FixedLine@@QAE@PAVWindow@@ABVResId@@@Z
??0ModalDialog@@QAE@PAVWindow@@ABVResId@@@Z
?GetSize@Font@@QBEABVSize@@XZ
??9Font@@QBEEABV0@@Z
?GetPitch@Font@@QBE?AW4FontPitch@@XZ
?GetCharSet@Font@@QBEGXZ
?GetFamily@Font@@QBE?AW4FontFamily@@XZ
??4Font@@QAEAAV0@ABV0@@Z
?GetDefaultDevice@Application@@SAPAVOutputDevice@@XZ
??0MapMode@@QAE@W4MapUnit@@@Z
?GetPrefMapMode@GDIMetaFile@@QBEABVMapMode@@XZ
?GetPrefSize@GDIMetaFile@@QBEABVSize@@XZ
?LogicToLogic@OutputDevice@@SA?AVSize@@ABV2@ABVMapMode@@1@Z
??1MapMode@@QAE@XZ
??0GraphicConversionParameters@@QAE@ABVSize@@_N11@Z
?GetBitmap@Graphic@@QBE?AVBitmap@@ABVGraphicConversionParameters@@@Z
?Scale@Bitmap@@QAEEABVSize@@K@Z
?Convert@Bitmap@@QAEEW4BmpConversion@@@Z
??0BitmapColor@@QAE@ABVColor@@@Z
?GetBestMatchingColor@BitmapReadAccess@@QAE?AVBitmapColor@@ABV2@@Z
??8BitmapColor@@QBEEABV0@@Z
?GetSettings@Application@@SAABVAllSettings@@XZ
?GetUILocale@AllSettings@@QBEABULocale@lang@star@sun@com@@XZ
?GetScaleX@MapMode@@QBEABVFraction@@XZ
?GetScaleY@MapMode@@QBEABVFraction@@XZ
?GetOrigin@MapMode@@QBEABVPoint@@XZ
?GetWeight@Font@@QBE?AW4FontWeight@@XZ
?GetItalic@Font@@QBE?AW4FontItalic@@XZ
?GetTextWidth@OutputDevice@@QBEJABVString@@GG@Z
?GetSizePixel@Bitmap@@QBE?AVSize@@XZ
??0Bitmap@@QAE@ABV0@@Z
??0Region@@QAE@XZ
?CreateRegion@Bitmap@@QBE?AVRegion@@ABVColor@@ABVRectangle@@@Z
??4Region@@QAEAAV0@ABV0@@Z
??1Region@@QAE@XZ
?GetRectCount@Region@@QBEKXZ
??1Bitmap@@QAE@XZ
?Crop@Bitmap@@QAEEABVRectangle@@@Z
?AcquireReadAccess@Bitmap@@QAEPAVBitmapReadAccess@@XZ
?GetPixel@BitmapReadAccess@@QBE?AVBitmapColor@@JJ@Z
??BBitmapColor@@QBEEXZ
??1BitmapColor@@QAE@XZ
?HasPalette@BitmapReadAccess@@QBEEXZ
?GetPaletteEntryCount@BitmapReadAccess@@QBEGXZ
?GetPaletteColor@BitmapReadAccess@@QBEABVBitmapColor@@G@Z
??0BitmapColor@@QAE@ABV0@@Z
?GetRed@BitmapColor@@QBEEXZ
?GetGreen@BitmapColor@@QBEEXZ
?GetBlue@BitmapColor@@QBEEXZ
?ReleaseAccess@Bitmap@@QAEXPAVBitmapReadAccess@@@Z
?IsEmpty@Region@@QBEEXZ
?BeginEnumRects@Region@@QAEJXZ
?GetNextEnumRect@Region@@QAEEJAAVRectangle@@@Z
?EndEnumRects@Region@@QAEXJ@Z
?GetMapUnit@MapMode@@QBE?AW4MapUnit@@XZ
??0VirtualDevice@@QAE@G@Z
??0GDIMetaFile@@QAE@XZ
?GetMapMode@OutputDevice@@QBEABVMapMode@@XZ
?SetMapMode@OutputDevice@@UAEXABVMapMode@@@Z
?AddGradientActions@OutputDevice@@QAEXABVRectangle@@ABVGradient@@AAVGDIMetaFile@@@Z
??1GDIMetaFile@@UAE@XZ
??1VirtualDevice@@UAE@XZ
??0GfxLink@@QAE@ABV0@@Z
svtmi
?WriteInt32@FilterConfigItem@@QAEXABVOUString@rtl@@J@Z
?GetFilterData@FilterConfigItem@@QBE?AV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@XZ
??1FilterConfigItem@@QAE@XZ
?GetStatusIndicator@FilterConfigItem@@QBE?AV?$Reference@VXStatusIndicator@task@star@sun@com@@@uno@star@sun@com@@XZ
??0FilterConfigItem@@QAE@ABVOUString@rtl@@PAV?$Sequence@UPropertyValue@beans@star@sun@com@@@uno@star@sun@com@@@Z
?ReadInt32@FilterConfigItem@@QAEJABVOUString@rtl@@J@Z
cppu3
typelib_static_type_init
typelib_static_sequence_type_init
uno_type_sequence_assign
uno_type_destructData
sal3
rtl_uString_acquire
rtl_uString_release
rtl_uString_new
msvcr90
_except_handler4_common
__CxxFrameHandler3
??3@YAXPAX@Z
??_U@YAPAXI@Z
??_V@YAXPAX@Z
memmove
_CxxThrowException
??2@YAPAXI@Z
_encode_pointer
_malloc_crt
free
_encoded_null
_decode_pointer
_initterm
_initterm_e
_onexit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_amsg_exit
kernel32
QueryPerformanceCounter
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
stlport_vc7145
?allocate@?$__node_alloc@$00$0A@@_STL@@SAPAXI@Z
?deallocate@?$__node_alloc@$00$0A@@_STL@@SAXPAXI@Z
Exports
Exports
DoExportDialog
GetVersionInfo
GraphicExport
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 23KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ