LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Behavioral task
behavioral1
Sample
FP-X用户手册.pdf
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
FP-X用户手册.pdf
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
fx20GM编程软件/lpk.dll
Resource
win7-20240508-en
Behavioral task
behavioral4
Sample
fx20GM编程软件/lpk.dll
Resource
win10v2004-20240508-en
Target
b1241ebbf023173a8aca6894388a44b6_JaffaCakes118
Size
18.9MB
MD5
b1241ebbf023173a8aca6894388a44b6
SHA1
f7271cb9fa3dc3e8014510b5d43c191c026c8ec5
SHA256
985ee527e08b66030783acf8dd1d077b947a72b833c4292c278300779c692f8b
SHA512
6cdf93dad15923a3d47bbc87ec22c580a51bbf5c01491c68a9bf2bfa8c0e00b3c7ba463d661f27dbb245ab4d5402adc5f42dc36fbcbfc12832d5908b0516722b
SSDEEP
393216:4lxFG/WNl8wFv1Hus4Rvf6DkKbbjR7Hm1aaiBjRjeY3WYNQDdab6iK82:4VG/WNhFp4RcbjR6SdjcHPc2
A PDF can contain malformed data to evade detection
Checks for missing Authenticode signature.
resource |
---|
unpack001/fx20GM编程软件/lpk.dll |
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetProcAddress
RtlMoveMemory
LoadLibraryW
lstrcatW
GetSystemDirectoryW
FreeLibrary
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceW
CreateProcessW
RtlZeroMemory
CloseHandle
WriteFile
CreateFileW
GetTempFileNameW
GetTempPathW
GetLastError
CreateMutexA
lstrcmpiW
GetModuleFileNameW
GetExitCodeProcess
TerminateProcess
WaitForSingleObject
GetCurrentThreadId
GetFileAttributesW
lstrcpyW
GetTickCount
GetLogicalDrives
FindNextFileW
SetFileAttributesW
CopyFileW
FindClose
FindFirstFileW
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
SetEvent
CreateEventW
DisableThreadLibraryCalls
wsprintfW
ord64
ord92
SHRegGetValueW
PathFindExtensionW
PathFindFileNameW
PathAppendW
PathRemoveFileSpecW
StrStrIW
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ