LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
Static task
static1
Behavioral task
behavioral1
Sample
41faa40906c4c7b189dfcf861594cd53_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
41faa40906c4c7b189dfcf861594cd53_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
41faa40906c4c7b189dfcf861594cd53_JaffaCakes118
Size
47KB
MD5
41faa40906c4c7b189dfcf861594cd53
SHA1
0916a8e3db9dc55bef9d247540f18a65200905c5
SHA256
d2b27bd1408962e29c302e3e7c9b8dc7244fff0bde875cd770950de2a8cc611a
SHA512
cadf9b3ab87aa89cce48a6e16adbd227bb6b10b4a9629568e025d76ff910ab1b41fbe0ad8a74b314aa18ee2ea6327eea186a070e573f072dc54d7d361953d038
SSDEEP
768:GHOlwYkeyrZrpYiwh5WzPECOPxuFWxuAHOlwYnCMIILQbCgFA:GuC7Zrfw+TE6su1C8wCa
Checks for missing Authenticode signature.
resource |
---|
41faa40906c4c7b189dfcf861594cd53_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
ExitProcess
GetProcAddress
lstrcpynA
LockResource
LoadResource
SizeofResource
FindResourceA
CreateProcessA
CloseHandle
WriteFile
CreateFileA
GetTempFileNameA
GetTempPathA
GetLastError
CreateMutexA
lstrcmpiA
GetModuleFileNameA
WaitForSingleObject
GetTickCount
GetLogicalDrives
FindClose
FindNextFileA
SetFileAttributesA
CopyFileA
GetFileAttributesA
FindFirstFileA
lstrcpyA
WaitForMultipleObjects
TerminateThread
ResumeThread
SetThreadPriority
CreateThread
FreeLibrary
SetEvent
CreateEventA
DisableThreadLibraryCalls
LoadLibraryA
lstrcatA
GetSystemDirectoryA
LocalAlloc
InterlockedExchange
RaiseException
LpkDllInitialize
LpkDrawTextEx
LpkEditControl
LpkExtTextOut
LpkGetCharacterPlacement
LpkGetTextExtentExPoint
LpkInitialize
LpkPSMTextOut
LpkTabbedTextOut
LpkUseGDIWidthCache
ftsWordBreak
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ