LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
48db082c617ef52f6effcc6c6465f7d9_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
48db082c617ef52f6effcc6c6465f7d9_JaffaCakes118.dll
Resource
win10v2004-20240704-en
Target
48db082c617ef52f6effcc6c6465f7d9_JaffaCakes118
Size
56KB
MD5
48db082c617ef52f6effcc6c6465f7d9
SHA1
f29433aaee49838edacfae141c64304397c769f5
SHA256
22896ce9c30ed23229ddf7f8c30b6ea8f46db54d09bb5cbae72636f0321e0e4f
SHA512
e6287d6a6bf81622ad4789fe878e7e3eea7aec112d00f3dfed862594e08ec609b7bd77518d4b1e9c84bd4107901184f790e51a3eb45dac91324e1858babb8479
SSDEEP
768:h+2bQR/duEBJ5g9GN+6ixiFsFIMQTVtXMZ9mX1BvgdswidcPaC8hE4aRPjXAvZFu:bQQGNmEa6PGswjay4O7Od
Checks for missing Authenticode signature.
resource |
---|
48db082c617ef52f6effcc6c6465f7d9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
MessageBoxA
wsprintfA
GetProcAddress
lstrlenA
lstrcpyA
CloseHandle
CreateThread
ExitProcess
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetCommandLineA
GetLastError
GetModuleFileNameA
GetModuleHandleA
GetProcessHeap
GetSystemDirectoryA
HeapAlloc
HeapFree
HeapReAlloc
LoadLibraryA
ResumeThread
Sleep
lstrcatA
lstrcmpA
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ