Static task
static1
General
-
Target
0630e8e921d7c937bd3c7a877c93efce_JaffaCakes118
-
Size
116KB
-
MD5
0630e8e921d7c937bd3c7a877c93efce
-
SHA1
688908928949c8fcd26804dc3798f3781faa19bc
-
SHA256
27fcbadb6437fedc253d0d36d98a6ce932e122761688a6c0d02cd38a49961e53
-
SHA512
ca16bf8a687d1b55f14590bd7f1d26c0a72750c4f19a3fbb8967c57b189b4bf8c76d8e9f298abb4cd35222507a8a7346741a858a0f62c0289ca3e0d7aa099b50
-
SSDEEP
3072:G7MNjofSxL5rZMhSA9KSLRTvJzrH0sdvce9qq0:IAjof4V3SJLEeI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0630e8e921d7c937bd3c7a877c93efce_JaffaCakes118
Files
-
0630e8e921d7c937bd3c7a877c93efce_JaffaCakes118.sys windows:5 windows x86 arch:x86
578b7369e425a7a93edbc847ba0f3f59
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
swprintf
ExFreePool
RtlCompareUnicodeString
ExAllocatePoolWithTag
RtlImageDirectoryEntryToData
Sections
Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE