?Ge1tIEPath@@YAHPAD@Z
?Ge5tIEPath@@YAHPAD@Z
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
c1fc7e03a0c9d9d41587f46eda4d6b5b_JaffaCakes118.dll
Resource
win7-20240708-en
Target
c1fc7e03a0c9d9d41587f46eda4d6b5b_JaffaCakes118
Size
39KB
MD5
c1fc7e03a0c9d9d41587f46eda4d6b5b
SHA1
c9e9a3b8691c00c942b2e9e35795682027c7e413
SHA256
a1000dc57772b3dc4e42eb1bb2c55d8df06f748163acac267c8dbb2935f61b00
SHA512
15b24dd28ad67841eb48b48ea7b689f1d02f7434d030ea8e21b3808448925e2b99a072ae8cb42549f38a0988ea670910911d3a696e0b604c428b9314858a8473
SSDEEP
768:6IJxg/tx4a4MjYa6TWejddr5RvwgVlXe4s5dFJz7D1r41/Sfn:PJxgV2a4Ra6TWep3RIgVlO4+PX1y
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
c1fc7e03a0c9d9d41587f46eda4d6b5b_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
?Ge1tIEPath@@YAHPAD@Z
?Ge5tIEPath@@YAHPAD@Z
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ