_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
fs_module_create
fs_module_exit
fs_module_init
gettext
gtk_file_system_gio_get_type
gtk_file_system_gio_new
ngettext
textdomain
Windows 7 will be removed from tria.ge on 2025-03-31
Behavioral task
behavioral1
Sample
fa453b5e84fc4ea00beb920fad530a7a_JaffaCakes118.dll
Resource
win7-20240903-en
Target
fa453b5e84fc4ea00beb920fad530a7a_JaffaCakes118
Size
47KB
MD5
fa453b5e84fc4ea00beb920fad530a7a
SHA1
a8337b0d1b0f8457388879b669dd031dce7e97b7
SHA256
15e22ecabf3e97e73d0382ba4773621ceb116de42309e2e06a6f4393693474c4
SHA512
635457c8c412afc174416f3090cdd657cb2683e29f765f01c48dea1abbe82fa370df2d9c8e1f978754090ce9916e60698ab245aa05ae89dc7ffb5ee57f3a376f
SSDEEP
768:0/uLYKvnWmrWvs/zQWF/e1d3S6a2zSZSg4m/x:0/tKZp/T/e/34/x
Detects file using ACProtect software.
resource | yara_rule |
---|---|
sample | acprotect |
resource | yara_rule |
---|---|
sample | upx |
Checks for missing Authenticode signature.
resource |
---|
fa453b5e84fc4ea00beb920fad530a7a_JaffaCakes118 |
unpack001/out.upx |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
_nl_msg_cat_cntr
bind_textdomain_codeset
bindtextdomain
dcgettext
dcngettext
dgettext
dngettext
fs_module_create
fs_module_exit
fs_module_init
gettext
gtk_file_system_gio_get_type
gtk_file_system_gio_new
ngettext
textdomain
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.