Static task
static1
General
-
Target
06398f70554644076c435a1c7d14ce6f_JaffaCakes118
-
Size
8KB
-
MD5
06398f70554644076c435a1c7d14ce6f
-
SHA1
f7b2d8683fd7ce545621d54f6ea8cc3b6815ced6
-
SHA256
0571511c55d0018e8e6cd9725762d6956d92e8b9329f6acd4b581f053b992126
-
SHA512
4ddf31ecfa816ba0b700166d7bddf7fa57d5238173cb6fc78f159c9358c6991bfc0ec6b46c7057197d63d89af65e68698057c232fef0579575a9b0758d4a3b29
-
SSDEEP
48:icjhKMPndkRAOQX6o8ZcnQKfEGboPDAkbmwnh0IwNze/Vkm:X8GnaPQXlmcnRpoPlbmy0IwReGm
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06398f70554644076c435a1c7d14ce6f_JaffaCakes118
Files
-
06398f70554644076c435a1c7d14ce6f_JaffaCakes118.sys windows:5 windows x86 arch:x86
d9c9c4541168665f44917e3ddc4a00d5
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
DbgPrint
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 100B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 96B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 96B - Virtual size: 74B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 160B - Virtual size: 132B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ