LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Behavioral task
behavioral1
Sample
2271385ac3763fd098a2ae28cf14ca85_JaffaCakes118.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
2271385ac3763fd098a2ae28cf14ca85_JaffaCakes118.dll
Resource
win10v2004-20240508-en
Target
2271385ac3763fd098a2ae28cf14ca85_JaffaCakes118
Size
109KB
MD5
2271385ac3763fd098a2ae28cf14ca85
SHA1
948aadacaf2bfeb4cea97a39a103ae56d8e76925
SHA256
94ee65410ffc2bde3571b247fa11b06111e84c5242071ab36c662e88d7c9da7f
SHA512
05ef821b69194a1a5fb7314a1ae8a8d1cae1dfbead08555a6730dbd3489b86542b407d8ed359bcf29d604737aceb93972a5267c6d57a0f32963c2e989e8a26c3
SSDEEP
768:Nep1/UH72fJzq1OSBOd34oXRbxSSuKRLj6Ew2C6X7EM85jv/ISLHOD1dwA761+Ci:4g2C6Xv8BO5T71Cu7h4/9w8k
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
2271385ac3763fd098a2ae28cf14ca85_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE