Static task
static1
General
-
Target
a689a10a14f2822a4f40a9dba5555e1e_JaffaCakes118
-
Size
775KB
-
MD5
a689a10a14f2822a4f40a9dba5555e1e
-
SHA1
a696468e5b62a60a35b56634ca3dcf46dedcc34c
-
SHA256
3b72e39ddae9f7ed11997cec80a15a318fc4b0f03aab8eada6b9bc1f14033283
-
SHA512
c34448dc014ac7cbe6ac66e733fd3c734174d5d3aaaf9f202a158f5c688d236fbbd01c9e5769700316a12efbceb4f5401350e8be16ef39e4511b4d565edc1a90
-
SSDEEP
24576:6Ti/KVqjgDxYxW3+UXgZ/16UrFixCcKlcD2NKAGnr1e:6UKzOUXgZt+CzlWU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a689a10a14f2822a4f40a9dba5555e1e_JaffaCakes118
Files
-
a689a10a14f2822a4f40a9dba5555e1e_JaffaCakes118.sys windows:6 windows x86 arch:x86
558c6c88a2220791b3db9c0db12192b2
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ntoskrnl.exe
ExAllocatePoolWithTag
IoAllocateMdl
MmProbeAndLockPages
MmMapLockedPagesSpecifyCache
MmUnlockPages
IoFreeMdl
ExAllocatePool
ExFreePool
NtQuerySystemInformation
hal
KeGetCurrentIrql
HalMakeBeep
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
INIT Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmm0 Size: 508KB - Virtual size: 508KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmm1 Size: 66KB - Virtual size: 66KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ