InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
34e48b7035d066b43dda66858e5b0c52_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
34e48b7035d066b43dda66858e5b0c52_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
34e48b7035d066b43dda66858e5b0c52_JaffaCakes118
Size
108KB
MD5
34e48b7035d066b43dda66858e5b0c52
SHA1
eefc638ca03886202d7d0e45d8013a99fd999362
SHA256
e8250db8f3c9403be3344a72671303cffbc29af6edfc0988892aad9912870702
SHA512
40b50cf55a1381d6b4d2d7e5718da8e5395dd4e19764f6e20d3c13859fec628dfee1635ffc8d5cb9b869a0f24f7d67c97bba49f08c02770f446fb08ee967c018
SSDEEP
1536:M1wehgynFTw49EdfTfdsIde0SI5xyOlp9v6jIQqu8xqe+sOlVb+pWW/DJwBu:M6MFTFmd6I4XcyOKbquQVOl0I/B
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
34e48b7035d066b43dda66858e5b0c52_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE