InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
Behavioral task
behavioral1
Sample
13f22f6746609a5cd23715b59a7328fe_JaffaCakes118.dll
Resource
win7-20240903-en
Target
13f22f6746609a5cd23715b59a7328fe_JaffaCakes118
Size
98KB
MD5
13f22f6746609a5cd23715b59a7328fe
SHA1
2e6919e103a757e903a907e79b9bce334d2ac383
SHA256
f40379b8cc408107d03c7cd08a27fff01412c292595ea27382d05fd296a39190
SHA512
3fea6bbc989869142fde097402b036986eadbff5505a2d686a1feb7f28d22f3a12d7a4bf6f4f204dab74cffe7f74a5929963bf113af9f533dee6fa5663978bf5
SSDEEP
1536:W0wNEdQwrd0WuxIRpR6huO5k1nGX1ahFt:jwNEaIOuO5k1y1a5
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
13f22f6746609a5cd23715b59a7328fe_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
InitSQLConnect
SQLAlloc
SQLClose
SQLExecute
SQLFree
SQLQuery
Uninstall
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE