InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
39fb7bbb4a27f965fe5f34987b0ebc48_JaffaCakes118.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
39fb7bbb4a27f965fe5f34987b0ebc48_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
39fb7bbb4a27f965fe5f34987b0ebc48_JaffaCakes118
Size
38KB
MD5
39fb7bbb4a27f965fe5f34987b0ebc48
SHA1
0eb0171654edfb1ca87c24a5047dddf29d3acddc
SHA256
b5c67a94f55e1ad6f08a9790e397fb30c725282c73fcb33a72f077dc3e2f4334
SHA512
60853b4074b663cae980b7441413b51908d0c0d46ba5d26da68c22accbba932a7580205ff3205be219da9287d2bcc281408058e377c7df67115d1305e51016c1
SSDEEP
768:vEZKasd58rDWSJa/WpgTVMJX2bXrcZa3Gd3HvMV9ZMKs/mdgaLIsJrZUnC2:ss15KfYOpiHbbc4GJYZIMNJ7
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
39fb7bbb4a27f965fe5f34987b0ebc48_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ