InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
d5ebd954c18328503024cc72fb091f05_JaffaCakes118.dll
Resource
win7-20240708-en
Target
d5ebd954c18328503024cc72fb091f05_JaffaCakes118
Size
105KB
MD5
d5ebd954c18328503024cc72fb091f05
SHA1
cc43dd3f881c151e56e3de0adf6d0482908553bd
SHA256
221e469877fc60a057f4dfde001b20a322d5b7f64585b57c402a159b3f8d739c
SHA512
34e53640801847e12d78be2bc522949ad6d4d9921aabd2dc2c310aa7e21ad50c6bf0c40a0be32d9d085b1cd37e37936101aa06a344d9433e29b7ef2c6d14370a
SSDEEP
3072:dwIsgPm3uyPeMb3zD3uMGKL1LKTbXX4rRg+sm8HQv:pPm+CNb3XeDGmbYL
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
d5ebd954c18328503024cc72fb091f05_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
GetProcAddress
GetModuleHandleA
LoadLibraryA
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE