InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
8322f2e2ba7f9938bc418f49e0b58dc9_JaffaCakes118.dll
Resource
win7-20240729-en
Target
8322f2e2ba7f9938bc418f49e0b58dc9_JaffaCakes118
Size
107KB
MD5
8322f2e2ba7f9938bc418f49e0b58dc9
SHA1
2ae235a67777def6fde75b1dfd7c8290f9653022
SHA256
f341a2a1f39654c6b510a6f9a844e30ed9f52858309753c7e6400005a17f2fe7
SHA512
dd4c49950560c53d23412dbc35901b5c98f7d145dde9cad495ef1fb639a6dde1237adc058396e320879174f6ca4a2a50e2efed82eb797403219f9f1999df3a1e
SSDEEP
1536:b/y5Vj3wTcZ0lxzoeQHpmxJdMYHkDjvRVII7ccevdgkJqQN16QWhXrhhYgAi:Tyj3iXlxzoe4yMYEvIwyvlsw14rfQi
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
8322f2e2ba7f9938bc418f49e0b58dc9_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE