Static task
static1
General
-
Target
f79094a1aa5080d40d1253dbf81fbb0e_JaffaCakes118
-
Size
27KB
-
MD5
f79094a1aa5080d40d1253dbf81fbb0e
-
SHA1
c31cd678cbce3d28dc86c418caa7ee569bf25902
-
SHA256
98bd927007a05843ff830b6d62054c7654b4ca95f3880e9715edfbee812916a6
-
SHA512
a53d291d6b6eac9e51168571b688cfd79cab17c092075c77ff246bca0c89a0807d6486c513c6a5c8152ec73d5266254fc25e83483a8d21e023a2592838b05ab6
-
SSDEEP
384:tRYPXXUePlgJnrKNDkUeyzUAIt7glyYP5z5n/xkWKTArf:t80eP8e+ABI+Bzx/xx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f79094a1aa5080d40d1253dbf81fbb0e_JaffaCakes118
Files
-
f79094a1aa5080d40d1253dbf81fbb0e_JaffaCakes118.sys windows:5 windows x86 arch:x86
2af7d019c7cf694886c7d5cd1c95650c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
IoFileObjectType
ExAllocatePoolWithTag
RtlInitString
wcslen
MmIsNonPagedSystemAddressValid
KeQueryTimeIncrement
Sections
.text Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 28B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 256B - Virtual size: 205B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ