Static task
static1
General
-
Target
1872687ef2ffddaf7b1dfce62771fe50_JaffaCakes118
-
Size
39KB
-
MD5
1872687ef2ffddaf7b1dfce62771fe50
-
SHA1
47d525a72c08f7150db39003ae1647c42769e98f
-
SHA256
3d565cc11538c403e2228ff4d60fc50c9ff04d15c2fdb7c219d723d25039abe3
-
SHA512
a91fb4c5c8179702cc427e70a96a42f9cb0ca820dfa36058b146182c7c145324f4126dc82e455ed72366a8c8c37a1c0c84065663fffd7601433b119ed1d62962
-
SSDEEP
768:p3W5nBSziWm4Ymmm/gq2/jqE4akA4ApgKs/QDfQsYK2o:pQBSz7m45D5qwKxUQLhN2o
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1872687ef2ffddaf7b1dfce62771fe50_JaffaCakes118
Files
-
1872687ef2ffddaf7b1dfce62771fe50_JaffaCakes118.sys windows:5 windows x86 arch:x86
d36f2b78fac645b0977a8ceabc852985
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ntoskrnl.exe
KeBugCheck
RtlAnsiStringToUnicodeString
ExAllocatePoolWithTag
RtlCreateAcl
MmIsNonPagedSystemAddressValid
SeLockSubjectContext
RtlInitAnsiString
MmGetSystemRoutineAddress
KeFlushQueuedDpcs
Sections
.text Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 128B - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
INIT Size: 384B - Virtual size: 356B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 128B - Virtual size: 48B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ