LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Overview
overview
7Static
static
3LEGEND注�...pk.dll
windows7-x64
7LEGEND注�...pk.dll
windows10-2004-x64
7down.htm
windows7-x64
1down.htm
windows10-2004-x64
1gs.htm
windows7-x64
1gs.htm
windows10-2004-x64
1hq.htm
windows7-x64
1hq.htm
windows10-2004-x64
1img/clienq.js
windows7-x64
3img/clienq.js
windows10-2004-x64
3img/cneeiw.js
windows7-x64
3img/cneeiw.js
windows10-2004-x64
3img/cwniq.js
windows7-x64
3img/cwniq.js
windows10-2004-x64
3img/enqn.js
windows7-x64
3img/enqn.js
windows10-2004-x64
3img/enwiww.js
windows7-x64
3img/enwiww.js
windows10-2004-x64
3img/geqqd.js
windows7-x64
3img/geqqd.js
windows10-2004-x64
3img/ieinq.js
windows7-x64
3img/ieinq.js
windows10-2004-x64
3img/lsqni.js
windows7-x64
3img/lsqni.js
windows10-2004-x64
3img/lwnqis.js
windows7-x64
3img/lwnqis.js
windows10-2004-x64
3img/lxiqn.js
windows7-x64
3img/lxiqn.js
windows10-2004-x64
3img/neitnt.js
windows7-x64
3img/neitnt.js
windows10-2004-x64
3img/nngien.js
windows7-x64
3img/nngien.js
windows10-2004-x64
3Static task
static1
Behavioral task
behavioral1
Sample
LEGEND注册机/1.76 连击版引擎注册/lpk.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
LEGEND注册机/1.76 连击版引擎注册/lpk.dll
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
down.htm
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
down.htm
Resource
win10v2004-20240226-en
Behavioral task
behavioral5
Sample
gs.htm
Resource
win7-20240508-en
Behavioral task
behavioral6
Sample
gs.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral7
Sample
hq.htm
Resource
win7-20240419-en
Behavioral task
behavioral8
Sample
hq.htm
Resource
win10v2004-20240508-en
Behavioral task
behavioral9
Sample
img/clienq.js
Resource
win7-20240220-en
Behavioral task
behavioral10
Sample
img/clienq.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral11
Sample
img/cneeiw.js
Resource
win7-20240508-en
Behavioral task
behavioral12
Sample
img/cneeiw.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral13
Sample
img/cwniq.js
Resource
win7-20240221-en
Behavioral task
behavioral14
Sample
img/cwniq.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral15
Sample
img/enqn.js
Resource
win7-20231129-en
Behavioral task
behavioral16
Sample
img/enqn.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral17
Sample
img/enwiww.js
Resource
win7-20240508-en
Behavioral task
behavioral18
Sample
img/enwiww.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral19
Sample
img/geqqd.js
Resource
win7-20240221-en
Behavioral task
behavioral20
Sample
img/geqqd.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral21
Sample
img/ieinq.js
Resource
win7-20240220-en
Behavioral task
behavioral22
Sample
img/ieinq.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral23
Sample
img/lsqni.js
Resource
win7-20240221-en
Behavioral task
behavioral24
Sample
img/lsqni.js
Resource
win10v2004-20240508-en
Behavioral task
behavioral25
Sample
img/lwnqis.js
Resource
win7-20240221-en
Behavioral task
behavioral26
Sample
img/lwnqis.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral27
Sample
img/lxiqn.js
Resource
win7-20240508-en
Behavioral task
behavioral28
Sample
img/lxiqn.js
Resource
win10v2004-20240226-en
Behavioral task
behavioral29
Sample
img/neitnt.js
Resource
win7-20231129-en
Behavioral task
behavioral30
Sample
img/neitnt.js
Resource
win10v2004-20240426-en
Behavioral task
behavioral31
Sample
img/nngien.js
Resource
win7-20240220-en
Behavioral task
behavioral32
Sample
img/nngien.js
Resource
win10v2004-20240508-en
Target
3df3da4e697cd3bf3b9cff12bb9046f6_JaffaCakes118
Size
936KB
MD5
3df3da4e697cd3bf3b9cff12bb9046f6
SHA1
a62cc9a795d4246a1161393edbd7a10da55407e8
SHA256
1e742cd8112c1d919613949865fba7d7767e30b2a63f159da758d15fbff6684c
SHA512
e7af63bfe1ba1b28d55e722fe9b695d5e77db89e185ea2a9b77dbddd0e37ba2a6fd1a334b2e7420aeba7fcce585d2d16d5682b8ad2e8d5e764054645a96e8b30
SSDEEP
24576:mQnxrVM9rbl500o/6sCztqmCHeuOBrnqIvTmZ:mQxrVMN0J6sCzdeeuOBhTmZ
Checks for missing Authenticode signature.
resource |
---|
unpack001/LEGEND注册机/1.76 连击版引擎注册/lpk.dll |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls
wsprintfW
ord64
ord92
SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ