lpk.pdb
Static task
static1
Behavioral task
behavioral1
Sample
828576c1c401e3bd7bfe031f1b652ecb_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
828576c1c401e3bd7bfe031f1b652ecb_JaffaCakes118.dll
Resource
win10v2004-20240730-en
General
-
Target
828576c1c401e3bd7bfe031f1b652ecb_JaffaCakes118
-
Size
193KB
-
MD5
828576c1c401e3bd7bfe031f1b652ecb
-
SHA1
b47dcf6041c4716d2722fc445053a20a6b9d63da
-
SHA256
3b32be85fb6872f8e11be8b77bca1253f77fc7cdeae6f0871ec4a24b2eb138bb
-
SHA512
b780da980886a775f1a53a61e46b26ac9d5c71c331c14e88fd32334b3f0d550d201ed55ed11500e8ae1ea7c178c48275d8e2fdd503488e754f1ce49be6d50c17
-
SSDEEP
3072:+ChdIlHxTdFN2Ond5Beak+sorGh/HFng88cEZlZbIUtgi33/:qTdFN2kTBNtbi9HFMJbBd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 828576c1c401e3bd7bfe031f1b652ecb_JaffaCakes118
Files
-
828576c1c401e3bd7bfe031f1b652ecb_JaffaCakes118.dll windows:5 windows x86 arch:x86
1d8fa22335b96aa9b0b4c8ce71fa382d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
_ftol
floor
LdrFindResourceEx_U
LdrAccessResource
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
NlsGetCacheUpdateCount
GetUserDefaultLCID
GetLocaleInfoW
EnterCriticalSection
LeaveCriticalSection
GetACP
InitializeCriticalSection
DisableThreadLibraryCalls
GlobalAlloc
GlobalFree
gdi32
GetWindowExtEx
AnyLinkedFonts
GetMapMode
GetWindowOrgEx
GetViewportOrgEx
SetMapMode
SetWindowOrgEx
SetViewportOrgEx
GetCurrentObject
GetObjectW
CreateFontIndirectW
SetWindowExtEx
SetViewportExtEx
GetViewportExtEx
SetTextAlign
GdiSetLastError
GetTextExtentExPointWPri
GetTextAlign
GetLayout
GetTextCharacterExtra
GetObjectType
GdiIsPlayMetafileDC
GdiRealizationInfo
CreateCompatibleDC
TranslateCharsetInfo
ExtTextOutW
GetBkMode
DeleteDC
DeleteObject
CreateCompatibleBitmap
GetGlyphIndicesW
GetCharABCWidthsW
SelectObject
CreateFontW
SetTextColor
SetBkColor
GetBkColor
user32
InvalidateRect
SetProcessDefaultLayout
GetKeyboardLayout
CreateCaret
EnableMenuItem
SetWindowLongW
GetWindowLongW
MessageBeep
SendMessageW
SendMessageA
InflateRect
GetSystemMetrics
GetClientRect
CheckMenuItem
usp10
UspAllocTemp
LpkPresent
UspFreeMem
UspAllocCache
ScriptApplyDigitSubstitution
ScriptStringFree
ScriptStringCPtoX
ScriptStringOut
ScriptStringXtoCP
ScriptGetProperties
ScriptIsComplex
ScriptStringGetLogicalWidths
ScriptGetFontProperties
ScriptStringGetOrder
ScriptRecordDigitSubstitution
ScriptStringAnalyse
Exports
Exports
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 172KB - Virtual size: 172KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 992B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 654B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ