InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
4e17d78888219edbd94414b8f8b809c0_JaffaCakes118.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e17d78888219edbd94414b8f8b809c0_JaffaCakes118.dll
Resource
win10v2004-20240709-en
Target
4e17d78888219edbd94414b8f8b809c0_JaffaCakes118
Size
66KB
MD5
4e17d78888219edbd94414b8f8b809c0
SHA1
75e0dbdc0f21fbd234b6a2786c027648074b4472
SHA256
68e754b0206af36483c5d44a7eeca8f61d5586eaf5426ea1f933fbfe4c5652e0
SHA512
1c75979265ff4191b2e9dbec70d7ea80d90a1ae018fdf40497bf0e54398668d56fb4663fcaf506a9acb60c18be03a170a45f1ec331384d64a60f541abd09fb54
SSDEEP
1536:Bdu6F2229vCXG2sHzYLApkWQ7nX/4bIoFFIvvGTnchVtb:XE9vxI7Xw6vOT8bb
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
4e17d78888219edbd94414b8f8b809c0_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ