Static task
static1
General
-
Target
fe02ed37872d99e7eb668e9e5234bc87_JaffaCakes118
-
Size
4KB
-
MD5
fe02ed37872d99e7eb668e9e5234bc87
-
SHA1
dc6b1787cdb81904c0a6ccc84c057636b860ce10
-
SHA256
d36458ac50a8e54e9c7d1f071576bdbdc60789026fc6520b4e30291faa4ffcd4
-
SHA512
55a915261c2667ad33d371b41b1f37afefebcc6ae29116bf3c03cc56b1ef1fe70e12ec0dbd56ae1aadefbe44e0fdc39ad79efbb1acbed5af2df21cb4765aca62
-
SSDEEP
48:6WWYK3rWhe5p/1IYolSODDPELT/aXqj8R6EDSKGjOXIIX:1K3rxp//olnDDP2aXqoUESKQOXIm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fe02ed37872d99e7eb668e9e5234bc87_JaffaCakes118
Files
-
fe02ed37872d99e7eb668e9e5234bc87_JaffaCakes118.sys windows:5 windows x86 arch:x86
1340ce7f1580a77ac5397e62aac4305f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
_wcsnicmp
MmIsAddressValid
ObReferenceObjectByName
IoDriverObjectType
IoDeleteDevice
IoAttachDeviceToDeviceStack
RtlInitUnicodeString
wcslen
ObfDereferenceObject
IoGetDeviceObjectPointer
IofCallDriver
InterlockedIncrement
InterlockedDecrement
IofCompleteRequest
KeInitializeSpinLock
IoCreateSymbolicLink
IoCreateDevice
hal
KfAcquireSpinLock
KfReleaseSpinLock
Sections
.text Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 192B - Virtual size: 180B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 576B - Virtual size: 572B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 192B - Virtual size: 164B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ