Lpttelybag
SetRpfwblue
Static task
static1
Behavioral task
behavioral1
Sample
f7251ee466baf6907db04625e0feb62d_JaffaCakes118.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
f7251ee466baf6907db04625e0feb62d_JaffaCakes118.exe
Resource
win10v2004-20240802-en
Target
f7251ee466baf6907db04625e0feb62d_JaffaCakes118
Size
66KB
MD5
f7251ee466baf6907db04625e0feb62d
SHA1
dfe38d99e3bd1c5b94906905bae707fe0bc6a14f
SHA256
1e78dfe495a00e894910f13b521d140f05ea9fd4ebd39f68bf3617a81e10037b
SHA512
dec189ce0d70b423c5d91cfd13374d07572ef71093e3aa80439921e19b6415e4b87e2c1f7060dd0b7f6bc32f21eeb0c14638e78394fc6bd4e22ea27e5df83a6d
SSDEEP
1536:+Ga0iA184WdbCYqaBkHmEquOFoYm5Icfd2T1b6n7MFw9eD8xXmy+936uObGUs:+LZAobCba7LuYiI4ybI7MFwzxXJ+936e
Checks for missing Authenticode signature.
resource |
---|
f7251ee466baf6907db04625e0feb62d_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
SetUserGeoID
GetDiskFreeSpaceA
FindFirstFileExA
GetSystemWindowsDirectoryA
Process32First
TransmitCommChar
SetConsoleMenuClose
GetUserDefaultLCID
ExpungeConsoleCommandHistoryA
GetProfileIntA
SetVolumeMountPointA
GetComputerNameA
EnumSystemCodePagesA
GetThreadIOPendingFlag
GetCommandLineA
GetConsoleOutputCP
MultiByteToWideChar
EnumSystemLocalesA
CreateFileMappingA
FindAtomA
WriteProcessMemory
SetFileAttributesA
WaitNamedPipeA
CreateMutexA
GetEnvironmentVariableA
SetFileApisToANSI
VirtualAlloc
RegisterWaitForSingleObject
OpenWaitableTimerA
GetFileAttributesExA
SetCommMask
GetProcessHeap
IsSystemResumeAutomatic
FindNextFileA
GetCommModemStatus
GetVolumePathNameA
BuildCommDCBAndTimeoutsA
SetWaitableTimer
QueryPerformanceFrequency
SetFileShortNameA
SetProcessPriorityBoost
GetCurrentThreadId
FreeConsole
LocalReAlloc
FindNextVolumeMountPointA
GetConsoleInputExeNameA
GetDefaultCommConfigA
OpenJobObjectA
GetModuleHandleA
ResetWriteWatch
SetConsoleDisplayMode
ResumeThread
VerifyVersionInfoA
GetVersionExA
GetConsoleCP
GetLogicalDriveStringsA
OpenProcess
HeapCompact
OpenEventA
GetSystemTimes
GetFileSize
MulDiv
SetConsoleCursor
GetExitCodeProcess
SetThreadIdealProcessor
GetCurrencyFormatA
CancelWaitableTimer
GetNumberFormatA
OpenSemaphoreA
LZDone
OpenThread
GetCurrentProcessId
GetFullPathNameA
GetStringTypeExA
SetInformationJobObject
GetConsoleTitleA
lstrlenA
DisableThreadLibraryCalls
FillConsoleOutputCharacterA
GetSystemDefaultLCID
GetModuleFileNameA
SetCommConfig
ChangeTimerQueueTimer
CreateDirectoryExA
GetFileTime
VirtualQueryEx
IsProcessorFeaturePresent
GetVolumeNameForVolumeMountPointA
GetWindowsDirectoryA
DeleteTimerQueue
GetCurrentConsoleFont
GetFileAttributesA
SetEnvironmentVariableA
GetSystemTime
RemoveDirectoryA
GetFileAttributesExA
GetNamedPipeInfo
FindFirstVolumeMountPointW
UpdateResourceA
UnlockFileEx
DisconnectNamedPipe
SetProcessShutdownParameters
CallNamedPipeA
GetSystemTimes
GetCurrentThreadId
ValidatePixelShader
ValidateVertexShader
DhcpDeleteServer
Lpttelybag
SetRpfwblue
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE