G:\CXR18\BSF\intel_a\code\bin\CATDesDisplayPropertiesPage.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0a53806d41723bfa7dd398f7ab52c186_JaffaCakes118.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
0a53806d41723bfa7dd398f7ab52c186_JaffaCakes118.dll
Resource
win10v2004-20240802-en
General
-
Target
0a53806d41723bfa7dd398f7ab52c186_JaffaCakes118
-
Size
208KB
-
MD5
0a53806d41723bfa7dd398f7ab52c186
-
SHA1
2d68b4c0ea269cc96d7571ecaf92a94471769533
-
SHA256
404a5e2c7657f59fd2c730b2c46f64bc134ac9d5e45ee76aa861282290e5405f
-
SHA512
9b24e56a1c590a69e6c0c9853f53e848f6e99ff30500a0d57be93d99a94a06bc1c820a3a9adfe4740b53ffcfbe39c9fa17ef650b7aab35104f068a9f4f319da3
-
SSDEEP
6144:mTYBml7BBMk0F5zm3fo/BhwLTnqAaLVCa:mTPLMk33CBhwnqBL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0a53806d41723bfa7dd398f7ab52c186_JaffaCakes118
Files
-
0a53806d41723bfa7dd398f7ab52c186_JaffaCakes118.dll windows:4 windows x86 arch:x86
ab0f571cede841be53223691da2a7749
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
catdesitf
?IID_CATIDesSettingAtt@@3U_GUID@@A
catdesuisettingctrl
?GetCATDesSettingCtrl@@YAJABU_GUID@@PAPAX@Z
catiaapplicationframe
??0CATComboSymbol@@QAE@PAVCATDialog@@ABVCATString@@KII@Z
??0CATComboWeight@@QAE@PAVCATDialog@@ABVCATString@@KHI@Z
??0CATComboDashed@@QAE@PAVCATDialog@@ABVCATString@@KHI@Z
??0CATComboColor@@QAE@PAVCATDialog@@ABVCATString@@KIIIHII@Z
??1CATComboColor@@UAE@XZ
??1CATComboDashed@@UAE@XZ
??1CATComboWeight@@UAE@XZ
??1CATComboSymbol@@UAE@XZ
??0CATEditor@@QAE@XZ
?CloseWindowFromEditor@CATEditor@@UAEXXZ
?GetEditorTitle@CATEditor@@UAE?AVCATUnicodeString@@XZ
?SetPropertyValue@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@W4ModeReadWrite@@@Z
?CommitModification@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@@Z
?CancelModification@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@@Z
?OKToRepaintOnCommit@CATEditor@@UAEJAAH@Z
?ExtractFromSelection@CATEditor@@UAEXAAVCATListValCATBaseUnknown_var@@PBV2@@Z
?QueryAcceptDocument@CATEditor@@UAEHPBVCATDocument@@@Z
?SetEditorSize@CATEditor@@UAEXAAH@Z
?GetUndoFromEditor@CATEditor@@UAEPAVCATCommandGlobalUndo@@XZ
??1CATEditor@@UAE@XZ
?IID_CATIUserSettings@@3U_GUID@@A
?MetaObject@CATIUserSettings@@SGPAVCATMetaClass@@XZ
??1CATIUserSettings@@UAE@XZ
??0CATIUserSettings@@QAE@XZ
??0CATEditorFactory@@QAE@XZ
??1CATEditorFactory@@UAE@XZ
?IsAuthorized@CATEditorFactory@@QBEHPBD@Z
?GetSelect@CATComboSymbol@@QAEIXZ
?GetSelect@CATComboWeight@@QAEIXZ
?GetSelectedColor@CATComboColor@@QAEHPAI00@Z
?GetSelect@CATComboDashed@@QAEIXZ
?SetSelectedColor@CATComboColor@@QAEXIII@Z
?SetSelect@CATComboDashed@@QAEXI@Z
?SetSelect@CATComboWeight@@QAEXI@Z
?SetSelect@CATComboSymbol@@QAEXI@Z
catdlgstandard
??1CATDlgToolsOptionsFrame@@UAE@XZ
?SetSensitivity@CATDlgToolsOptionsFrame@@UAEXABK@Z
?GetOptionsFrame@CATDlgToolsOptionsFrame@@UAEPAVCATDlgFrame@@XZ
?IsAKindOf@CATDlgToolsOptionsFrame@@UBEHPBD@Z
?IsA@CATDlgToolsOptionsFrame@@UBEPBDXZ
?GetMetaObject@CATDlgToolsOptionsFrame@@UBGPAVCATMetaClass@@XZ
??0CATDlgToolsOptionsFrame@@QAE@PAVCATDialog@@ABVCATString@@1K@Z
di0panv2
??1CATDlgLabel@@UAE@XZ
??1CATDlgLock@@UAE@XZ
?ResetLetterObject@CATDlgLabel@@UAEXXZ
?GetLetterObject@CATDlgLabel@@UAEPAVl_CATDialog@@XZ
?IsAKindOf@CATDlgLabel@@UBEHPBD@Z
?IsA@CATDlgLabel@@UBEPBDXZ
?GetMetaObject@CATDlgLabel@@UBGPAVCATMetaClass@@XZ
?ResetLetterObject@CATDlgCheckButton@@UAEXXZ
?GetLetterObject@CATDlgCheckButton@@UAEPAVl_CATDialog@@XZ
?IsAKindOf@CATDlgLock@@UBEHPBD@Z
?IsA@CATDlgLock@@UBEPBDXZ
?GetMetaObject@CATDlgLock@@UBGPAVCATMetaClass@@XZ
?SetGridConstraints@CATDialog@@QAEXFFFFI@Z
??0CATDlgLock@@QAE@PAVCATDialog@@ABVCATString@@ABVCATSettingInfo@@K@Z
??0CATDlgLabel@@QAE@PAVCATDialog@@ABVCATString@@K@Z
?AddAssociatedDialog@CATDlgLock@@QAEXPAVCATDialog@@@Z
??0CATDlgLock@@QAE@PAVCATDialog@@ABVCATString@@PBVCATSettingInfo@@HK@Z
?ClassName@CATDlgComboSelectNotification@@SGPBDXZ
??1CATDlgFrame@@UAE@XZ
?GetResourceFilename@CATDialog@@UBEPADH@Z
?ResetLetterObject@CATDlgFrame@@UAEXXZ
?GetLetterObject@CATDlgFrame@@UAEPAVl_CATDialog@@XZ
?RestoreState@CATDialog@@UAEHPAVCATNotification@@AAVCATMarshal@@@Z
?SaveState@CATDialog@@UAEHPAVCATNotification@@AAVCATMarshal@@@Z
?Cancel@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?Desactivate@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?Activate@CATDialog@@UAE?AW4CATStatusChangeRC@@PAVCATCommand@@PAVCATNotification@@@Z
?GetName@CATDialog@@UAEAAVCATString@@XZ
?RequestDelayedDestruction@CATDialog@@UAEXXZ
?IsAKindOf@CATDlgFrame@@UBEHPBD@Z
?IsA@CATDlgFrame@@UBEPBDXZ
?GetMetaObject@CATDlgFrame@@UBGPAVCATMetaClass@@XZ
??0CATDlgFrame@@QAE@PAVCATDialog@@ABVCATString@@K@Z
catinteractiveinterfaces
?IID_CATIIniSettingManagment@@3U_GUID@@A
catobjectmodelerbase
??1CATIGenericFactory@@UAE@XZ
??0CATIGenericFactory@@QAE@XZ
?ExternalBindPointedObjects@CATExtensionAdapter@@UAE?AVCATListValCATBaseUnknown_var@@QBDPAVCATIBindParameters@@@Z
?GetStoredName@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@ABVCATUnicodeString@@@Z
?FillArea@CATExtensionAdapter@@UAEXABVCATUnicodeString@@V_SEQUENCE_octet@@E@Z
?IsAFilledArea@CATExtensionAdapter@@UAEEABVCATUnicodeString@@@Z
?ListSupportedAreasIdentifier@CATExtensionAdapter@@UAEXPAVCATListValCATUnicodeString@@AAE@Z
?GetAdditionalInfos@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetLocatorType@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetDocument@CATExtensionAdapter@@UAEPAVCATDocument@@XZ
?GetIdentifier@CATExtensionAdapter@@UAEXAAV_SEQUENCE_octet@@AAE@Z
?GetSymbolicLink@CATExtensionAdapter@@UAEPAVCATISymbolicLink@@XZ
?GetName_B@CATExtensionAdapter@@UAE?AV_SEQUENCE_octet@@W4CATNameKind@@@Z
?GetName@CATExtensionAdapter@@UAEPADW4CATNameKind@@@Z
?GetInverseLinks@CATExtensionAdapter@@UAE?AVCATListValCATBaseUnknown_var@@XZ
?MetaObject@CATIGenericFactory@@SGPAVCATMetaClass@@XZ
?AddInverseLink@CATExtensionAdapter@@UAEXVCATBaseUnknown_var@@@Z
?GetCallbackManager@CATExtensionAdapter@@UAEPAVCATCallbackManager@@XZ
?RemoveInterfaceSubscriptions@CATExtensionAdapter@@UAEXPAVCATInterfaceEvents@@PAD@Z
?RemoveSubscriptionsOn@CATExtensionAdapter@@UAEXPAVCATInterfaceEvents@@PBDPADPAX@Z
?AddSubscription@CATExtensionAdapter@@UAEJPAVCATInterfaceEvents@@PBDP8CATBaseUnknown@@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?MetaObject@CATExtensionAdapter@@SGPAVCATMetaClass@@XZ
?ExternalBindPointedObjects@CATImplementationAdapter@@UAE?AVCATListValCATBaseUnknown_var@@QBDPAVCATIBindParameters@@@Z
?GetStoredName@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@ABVCATUnicodeString@@@Z
?FillArea@CATImplementationAdapter@@UAEXABVCATUnicodeString@@V_SEQUENCE_octet@@E@Z
?IsAFilledArea@CATImplementationAdapter@@UAEEABVCATUnicodeString@@@Z
?ListSupportedAreasIdentifier@CATImplementationAdapter@@UAEXPAVCATListValCATUnicodeString@@AAE@Z
?GetAdditionalInfos@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetLocatorType@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@XZ
?GetDocument@CATImplementationAdapter@@UAEPAVCATDocument@@XZ
?GetIdentifier@CATImplementationAdapter@@UAEXAAV_SEQUENCE_octet@@AAE@Z
?GetSymbolicLink@CATImplementationAdapter@@UAEPAVCATISymbolicLink@@XZ
?RemoveInverseLink@CATExtensionAdapter@@UAEXVCATBaseUnknown_var@@@Z
?AddInverseLink@CATImplementationAdapter@@UAEXVCATBaseUnknown_var@@@Z
?RemoveInverseLink@CATImplementationAdapter@@UAEXVCATBaseUnknown_var@@@Z
?GetInverseLinks@CATImplementationAdapter@@UAE?AVCATListValCATBaseUnknown_var@@XZ
?GetName@CATImplementationAdapter@@UAEPADW4CATNameKind@@@Z
?GetName_B@CATImplementationAdapter@@UAE?AV_SEQUENCE_octet@@W4CATNameKind@@@Z
js0fm
?GetCallbackManager@CATCommand@@UAEPAVCATCallbackManager@@XZ
?LogicalDeath@CATCommand@@UAEJXZ
?SetName@CATCommand@@UAEXAAVCATString@@@Z
?AnalyseNotification@CATCommand@@UAE?AW4CATNotifPropagationMode@@PAV1@PAVCATNotification@@@Z
?SendCommandSpecificObject@CATCommand@@UAEPAXPBDPAVCATNotification@@@Z
?SetPrompt@CATCommand@@UAEXVCATString@@@Z
?GetPrompt@CATCommand@@UAE?AVCATString@@XZ
?GetStatusPrompt@CATCommand@@UAEHXZ
?BeginCommand@CATCommand@@UAEXXZ
?EndCommand@CATCommand@@UAEXXZ
?Reset@CATCommand@@UAEXXZ
?UndoCommand@CATCommand@@UAEXXZ
?GetGlobalUndo@CATCommand@@UAEPAVCATCommandGlobalUndo@@XZ
?AddAnalyseNotificationCB@CATCommand@@IAEJPAV1@PBDP8CATBaseUnknown@@AEX0PAVCATNotification@@PAX@Z3@Z
js0group
??1CATString@@QAE@XZ
??0CATString@@QAE@QBD@Z
?QueryInterface@CATBaseUnknown@@UAGJABU_GUID@@PAPAX@Z
?AddRef@CATBaseUnknown@@UAGKXZ
?Release@CATBaseUnknown@@UAGKXZ
?GetTypeInfoCount@CATBaseUnknown@@UAGJPAI@Z
?GetTypeInfo@CATBaseUnknown@@UAGJIKPAPAUITypeInfo@@@Z
?GetIDsOfNames@CATBaseUnknown@@UAGJABU_GUID@@PAPAGIKPAJ@Z
?Invoke@CATBaseUnknown@@UAGJJABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?QueryInterface@CATBaseUnknown@@UBEPAV1@PBD@Z
?GetImpl@CATBaseUnknown@@UBGPAV1@H@Z
?SetImpl@CATBaseUnknown@@UAGPAV1@PAV1@@Z
?IsNull@CATBaseUnknown@@UBEHXZ
?IsEqual@CATBaseUnknown@@UBEHPBV1@@Z
?ChangeComponentState@CATBaseUnknown@@UAEJW4ComponentState@1@0PBVCATSysChangeComponentStateContext@@@Z
?AddCallback@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@Z2@Z
?RemoveCallback@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@J@Z
?RemoveCallbacksOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPAX@Z
?RemoveSubscriberCallbacks@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZABU_GUID@@2@Z
?AddSubscription@CATEventSubscriber@@UAEJPAVCATBaseUnknown@@PBDP82@AEX1PAXPAVCATNotification@@2J@ZPAD2@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDABU_GUID@@PAX@Z
?RemoveSubscriptionsOn@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PBDPADPAX@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@ABU_GUID@@@Z
?RemoveInterfaceSubscriptions@CATEventSubscriber@@UAEXPAVCATBaseUnknown@@PAD@Z
??3CATBaseUnknown@@SAXPAX@Z
??2CATBaseUnknown@@SAPAXI@Z
?Tie_GetTypeInfoCount@@YAJPAUIDispatch@@PAVCATMetaClass@@PAI@Z
?Tie_GetTypeInfo@@YAJPAUIDispatch@@PAVCATMetaClass@@IKPAPAUITypeInfo@@@Z
?Tie_GetIDsOfNames@@YAJPAUIDispatch@@PAVCATMetaClass@@ABU_GUID@@PAPAGIKPAJ@Z
?Tie_Invoke@@YAJPAUIDispatch@@PAVCATMetaClass@@JABU_GUID@@KGPAUtagDISPPARAMS@@PAUtagVARIANT@@PAUtagEXCEPINFO@@PAI@Z
?Run@Tie_StackCtx@@QAEPAVCATBaseUnknown@@PAV2@0@Z
?fct_RetrieveMetaObject@@YAPAVCATMetaClass@@PBDW4ENUMTypeOfClass@@PAV1@00J@Z
?MetaObject@CATBaseUnknown@@SGPAVCATMetaClass@@XZ
?GetCallbackManager@CATEventSubscriber@@UAEPAVCATCallbackManager@@XZ
??0CATMetaClass@@QAE@PBU_GUID@@PBDPAV0@2W4ENUMTypeOfClass@@@Z
??2CATMetaClass@@SAPAXI@Z
?Tie_Destruct@@YAXPAUIUnknown@@PAPAVCATBaseUnknown@@W4ENUMTypeOfClass@@J@Z
?GetTypeOfClass@CATMetaClass@@QBG?AW4ENUMTypeOfClass@@XZ
?IsA@CATBaseUnknown@@UBEPBDXZ
?IsAKindOf@CATBaseUnknown@@UBEHPBD@Z
?Tie_Query@@YAJPAUIUnknown@@PAVCATBaseUnknown@@1PAVCATMetaClass@@HABU_GUID@@PAPAX@Z
?Tie_AddRef@@YAKPAVCATBaseUnknown@@W4ENUMTypeOfClass@@PAJ@Z
?Tie_Release@@YAKPAHPAPAVCATBaseUnknown@@PAV1@W4ENUMTypeOfClass@@PAJ@Z
?GetClassId@CATMetaClass@@QBGABU_GUID@@XZ
?IsA@CATMetaClass@@QBEPBDXZ
?IsAKindOf@CATMetaClass@@QBEHPBD@Z
?Tie_Construct@@YAPAVCATBaseUnknown@@PAUIUnknown@@PAVCATMetaClass@@PAPAV1@HPAV1@ABU_GUID@@W4ENUMTypeOfClass@@3P6APAV1@XZ32@Z
??0CATFillDictionary@@QAE@PBVCATMetaClass@@0PAX1H@Z
?SetExtensionOf@CATMetaClass@@QAGXPAV1@@Z
?fct_FindMetaObject@@YAPAVCATMetaClass@@PBD@Z
??1CATUnicodeString@@QAE@XZ
??8CATUnicodeString@@QBEHABV0@@Z
??0CATUnicodeString@@QAE@QBD@Z
??BCATUnicodeString@@QBEPBDXZ
?SetFWname@CATMetaClass@@QAEXPBD@Z
?AddDictionary@@YAPBUinfo_dic@@PBU_GUID@@0PBD11PAX12HHH1@Z
?CLSID_CATMetaClass@@3U_GUID@@B
??0CATFillDictionary@@QAE@ABU_GUID@@0PAX1@Z
msvcr80
__clean_type_info_names_internal
_unlock
__dllonexit
_onexit
_except_handler4_common
_crt_debugger_hook
__CppXcptFilter
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
free
_malloc_crt
_encode_pointer
??_V@YAXPAX@Z
_callnewh
_lock
malloc
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent
Exports
Exports
CreateTIECATIDesDisplayPropertiesPageEdtFactoryCATDesDisplayPropertiesPageEdtFactory
CreateTIECATIUserSettingsCATDesDisplayPropertiesPageEdt
DASSAULT_SYSTEMES_CAA2_INTERNAL_CATDesDisplayPropertiesPage
Sections
.text Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ