InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
fd09fc0c9eced14a46439ac52cb8748a_JaffaCakes118.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fd09fc0c9eced14a46439ac52cb8748a_JaffaCakes118.dll
Resource
win10v2004-20240412-en
Target
fd09fc0c9eced14a46439ac52cb8748a_JaffaCakes118
Size
66KB
MD5
fd09fc0c9eced14a46439ac52cb8748a
SHA1
9653dc9f1f6cc9e99d7eea4092a99266d469d4c1
SHA256
1eef936bbc7095570278575cbc39d47e3b73ed93b49758c18da6cb8e9ecb4173
SHA512
3dd05510af6384db709fe62190fbe30b03ec37685a6c456bd5356437315c71920052e4bdf526d89e560b58764bee871438353a81799023c2e45d9fec72b0c185
SSDEEP
1536:YRcCGPNvBMYOm1NHkDn8qJjfmMkX4NwlDiJO4N4JsI9FuZq3:NCGP3MYvCDn1Jju54SKNqFuZq3
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fd09fc0c9eced14a46439ac52cb8748a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ