LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Behavioral task
behavioral1
Sample
59b874d8d1364ecbc7cd53fe5b8f4f46_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
59b874d8d1364ecbc7cd53fe5b8f4f46_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
59b874d8d1364ecbc7cd53fe5b8f4f46_JaffaCakes118
Size
110KB
MD5
59b874d8d1364ecbc7cd53fe5b8f4f46
SHA1
61862ad2a98294a158488149d593e212057c42b3
SHA256
ef9163e2332a5282080be4e46edd791726d91cac28255366f34de053a5316c5c
SHA512
87fec58df1841edb470cf6c4c2e8cd19437819af13fa9fdf074a6fc5435f49a60f54420f19aafa7d8834c3e2d0d0426c322f70c43d0768c645ec4e02fa13e58c
SSDEEP
768:r5uGKppWZ5OK3abfc9YtDACQestrJopT7adaKe2CSs9TrJT60Gzcydwoj2OwL1Ei:r5u352CSs5pydwoj23mxVtJ9u9/iYHD
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
59b874d8d1364ecbc7cd53fe5b8f4f46_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE