WlDimsLock
WlDimsLogoff
WlDimsLogon
WlDimsShutdown
WlDimsStartShell
Behavioral task
behavioral1
Sample
3b062da4e8696ed8c5bbfed9ae580fe5_JaffaCakes118.dll
Resource
win7-20241010-en
Behavioral task
behavioral2
Sample
3b062da4e8696ed8c5bbfed9ae580fe5_JaffaCakes118.dll
Resource
win10v2004-20241007-en
Target
3b062da4e8696ed8c5bbfed9ae580fe5_JaffaCakes118
Size
1.5MB
MD5
3b062da4e8696ed8c5bbfed9ae580fe5
SHA1
e691bfccfe2195c8d40a02deefac369f276e16ec
SHA256
e704dfb528068bd20e1af0a6955c14d2fd747d3034c98b5c40443486445a84c7
SHA512
831520dd7ac2cbb818c5431fbec750c8a1c953b2cf13a4e266e32c877bbc30107916904c4c12a8b3af690704e7346c3767193ae0f901329fe17eb5d6378a31ca
SSDEEP
6144:rLEYLHy6phFtkTCTBlG17Cld41Yztvwbq:fEYzychjkTCT36E41YNwbq
resource | yara_rule |
---|---|
sample | family_gh0strat |
Checks for missing Authenticode signature.
resource |
---|
3b062da4e8696ed8c5bbfed9ae580fe5_JaffaCakes118 |
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
WlDimsLock
WlDimsLogoff
WlDimsLogon
WlDimsShutdown
WlDimsStartShell
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ