InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
229383a26d23545a64ec247703400d9d_JaffaCakes118.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
229383a26d23545a64ec247703400d9d_JaffaCakes118.dll
Resource
win10v2004-20240611-en
Target
229383a26d23545a64ec247703400d9d_JaffaCakes118
Size
66KB
MD5
229383a26d23545a64ec247703400d9d
SHA1
764996e6b7f8f98b79b49452cf63fb4e55eb1cff
SHA256
aeab87734ef2e66a302e420637f5b242a2cf02e06b1b6e52ec4cc41b71ed0eec
SHA512
f6873cb1a93e5cf147b057b5f4d4518007d89c6a35c30c57d646fd40af60d2cd358dac079a96bfaf724cf59d900222bea8403c8b87513991724d6bf3ad1953c6
SSDEEP
1536:mXNhSeatTg78TNFOtFrhEnwRLhE56BmyiM4/j97S/47:KEeiTPTN6FlOAUObiB7e8
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
229383a26d23545a64ec247703400d9d_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ